NVD

Id
48585  
Name
CVE-2009-1298  
Description
The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-12-08  
Modified Date
2012-03-19  
Seq
2009-1298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245019 48585 CVE-2009-1298 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=bbf31bf18d34caa87dd01f08bf713635593697f2  View
245020 48585 CVE-2009-1298 SUSE-SA:2010:001  View
245021 48585 CVE-2009-1298 http://twitter.com/spendergrsec/statuses/6339560349  View
245022 48585 CVE-2009-1298 http://wiki.rpath.com/Advisories:rPSA-2009-0161  View
245023 48585 CVE-2009-1298 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32  View
245024 48585 CVE-2009-1298 MDVSA-2009:329  View
245025 48585 CVE-2009-1298 20091216 rPSA-2009-0161-1 hwdata kernel  View
245026 48585 CVE-2009-1298 http://www.theregister.co.uk/2009/12/11/linux_kernel_bugs_patched/  View
245027 48585 CVE-2009-1298 USN-869-1  View
245028 48585 CVE-2009-1298 https://bugzilla.redhat.com/show_bug.cgi?id=544144  View
245029 48585 CVE-2009-1298 FEDORA-2009-12786  View
245030 48585 CVE-2009-1298 FEDORA-2009-12825  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43562 JVNDB-2009-004569 Linux kernel の net/ipv4/ip_fragment.c におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の net/ipv4/ip_fragment.c の ip_frag_reasm 関数は、正確でない引数を持つ IP_INC_STATS_BH を呼び出す、および ip_defrag 関数に関する不備があるため、サービス運用妨害 (NULL ポインタデリファレンスおよびハング) 状態となる脆弱性が存在します。 CVE-2009-1298 38729 CVE-2009-1298 48585 7.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004569.html 2009-11-30 2012-09-25 View