NVD

Id
51430  
Name
CVE-2009-4307  
Description
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value).  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-12-12  
Modified Date
2012-03-19  
Seq
2009-4307  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260867 51430 CVE-2009-4307 http://bugzilla.kernel.org/show_bug.cgi?id=14287  View
260868 51430 CVE-2009-4307 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=503358ae01b70ce6909d19dd01287093f6b6271c  View
260869 51430 CVE-2009-4307 SUSE-SA:2010:001  View
260870 51430 CVE-2009-4307 SUSE-SA:2010:005  View
260871 51430 CVE-2009-4307 [linux-kernel] 20091209 [GIT PULL] ext4 updates for v2.6.33  View
260872 51430 CVE-2009-4307 oval:org.mitre.oval:def:9874  View
260873 51430 CVE-2009-4307 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git6.log  View
260874 51430 CVE-2009-4307 MDVSA-2011:029  View
260875 51430 CVE-2009-4307 RHSA-2010:0380  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41523 JVNDB-2009-002530 Linux kernel の ext4_fill_flex_info 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の ext4_fill_flex_info 関数には、スーパーブロックの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4307 41738 CVE-2009-4307 51430 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002530.html 2009-12-13 2010-05-21 View