NVD

Id
48623  
Name
CVE-2009-1336  
Description
fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-04-22  
Modified Date
2013-08-09  
Seq
2009-1336  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245378 48623 CVE-2009-1336 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=54af3bb543c071769141387a42deaaab5074da55  View
245379 48623 CVE-2009-1336 oval:org.mitre.oval:def:10859  View
245380 48623 CVE-2009-1336 oval:org.mitre.oval:def:8495  View
245381 48623 CVE-2009-1336 RHSA-2009:0473  View
245382 48623 CVE-2009-1336 DSA-1794  View
245383 48623 CVE-2009-1336 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23  View
245384 48623 CVE-2009-1336 [oss-security] 20090406 CVE request: kernel: NFS: Fix an Oops in encode_lookup()  View
245385 48623 CVE-2009-1336 [oss-security] 20090417 Re: CVE request: kernel: NFS: Fix an Oops in encode_lookup()  View
245386 48623 CVE-2009-1336 RHSA-2009:1024  View
245387 48623 CVE-2009-1336 RHSA-2009:1077  View
245388 48623 CVE-2009-1336 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
245389 48623 CVE-2009-1336 34390  View
245390 48623 CVE-2009-1336 1022176  View
245391 48623 CVE-2009-1336 USN-793-1  View
245392 48623 CVE-2009-1336 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
245393 48623 CVE-2009-1336 ADV-2009-3316  View
245394 48623 CVE-2009-1336 https://bugzilla.redhat.com/show_bug.cgi?id=494074  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40287 JVNDB-2009-001293 Linux Kernel の fs/nfs/client.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/nfs/client.c には、NFS ファイル名の長さを保存する特定の構造体メンバーの初期化を正しく処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1336 38767 CVE-2009-1336 48623 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001293.html 2009-04-22 2009-06-23 View