NVD

Id
50071  
Name
CVE-2009-2849  
Description
The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of service (NULL pointer dereference) via vectors related to "suspend_* sysfs attributes" and the (1) suspend_lo_store or (2) suspend_hi_store functions. NOTE: this is only a vulnerability when sysfs is writable by an attacker.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-08-18  
Modified Date
2012-03-19  
Seq
2009-2849  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253365 50071 CVE-2009-2849 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.30.y.git;a=commit;h=3c92900d9a4afb176d3de335dc0da0198660a244  View
253366 50071 CVE-2009-2849 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
253367 50071 CVE-2009-2849 oval:org.mitre.oval:def:10396  View
253368 50071 CVE-2009-2849 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.2  View
253369 50071 CVE-2009-2849 [oss-security] 20090724 md raid null ptr dereference (when sysfs is writable)  View
253370 50071 CVE-2009-2849 [oss-security] 20090726 Re: md raid null ptr dereference (when sysfs is writable)  View
253371 50071 CVE-2009-2849 1022961  View
253372 50071 CVE-2009-2849 USN-852-1  View
253373 50071 CVE-2009-2849 ADV-2010-0528  View
253374 50071 CVE-2009-2849 kernel-mddriver-dos(52858)  View
253375 50071 CVE-2009-2849 http://xorl.wordpress.com/2009/07/21/linux-kernel-md-driver-null-pointer-dereference/  View
253376 50071 CVE-2009-2849 RHSA-2009:1540  View
253377 50071 CVE-2009-2849 FEDORA-2009-9044  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41186 JVNDB-2009-002193 Linux kernel の md ドライバにおけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の md ドライバには、suspend_* sysfs 属性および、suspend_lo_store または suspend_hi_store 関数に関連する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-2849 40280 CVE-2009-2849 50071 4.7 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002193.html 2009-08-18 2009-11-09 View