NVD

Id
51653  
Name
CVE-2009-4536  
Description
drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2010-01-12  
Modified Date
2012-03-19  
Seq
2009-4536  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261761 51653 CVE-2009-4536 http://blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/  View
261762 51653 CVE-2009-4536 http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html  View
261763 51653 CVE-2009-4536 FEDORA-2010-1787  View
261764 51653 CVE-2009-4536 SUSE-SA:2010:005  View
261765 51653 CVE-2009-4536 SUSE-SA:2010:007  View
261766 51653 CVE-2009-4536 SUSE-SA:2010:010  View
261767 51653 CVE-2009-4536 SUSE-SA:2010:012  View
261768 51653 CVE-2009-4536 SUSE-SA:2010:013  View
261769 51653 CVE-2009-4536 SUSE-SA:2010:014  View
261770 51653 CVE-2009-4536 http://marc.info/?t=126203102000001&r=1&w=2  View
261771 51653 CVE-2009-4536 oval:org.mitre.oval:def:10607  View
261772 51653 CVE-2009-4536 oval:org.mitre.oval:def:12440  View
261773 51653 CVE-2009-4536 oval:org.mitre.oval:def:13226  View
261774 51653 CVE-2009-4536 oval:org.mitre.oval:def:7453  View
261775 51653 CVE-2009-4536 1023420  View
261776 51653 CVE-2009-4536 DSA-1996  View
261777 51653 CVE-2009-4536 DSA-2005  View
261778 51653 CVE-2009-4536 [oss-security] 20091228 CVE requests - kernel security regressions for CVE-2009-1385/and -1389  View
261779 51653 CVE-2009-4536 [oss-security] 20091229 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389  View
261780 51653 CVE-2009-4536 [oss-security] 20091231 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389  View
261781 51653 CVE-2009-4536 RHSA-2010:0019  View
261782 51653 CVE-2009-4536 RHSA-2010:0020  View
261783 51653 CVE-2009-4536 RHSA-2010:0041  View
261784 51653 CVE-2009-4536 RHSA-2010:0053  View
261785 51653 CVE-2009-4536 RHSA-2010:0111  View
261786 51653 CVE-2009-4536 RHSA-2010:0882  View
261787 51653 CVE-2009-4536 37519  View
261788 51653 CVE-2009-4536 http://www.vmware.com/security/advisories/VMSA-2011-0009.html  View
261789 51653 CVE-2009-4536 kernel-e1000main-security-bypass(55648)  View
261790 51653 CVE-2009-4536 https://bugzilla.redhat.com/show_bug.cgi?id=552126  View
261791 51653 CVE-2009-4536 RHSA-2010:0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35224 JVNDB-2010-001004 Linux kernel の e1000 ドライバにおけるパケットフィルタの制限を回避される脆弱性 Linux kernel の e1000 ドライバには、MTU を超えるイーサネットフレームの処理に不備があるため、パケットフィルタの制限を回避される脆弱性が存在します。 CVE-2009-4536 41967 CVE-2009-4536 51653 7.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001004.html 2010-01-12 2011-06-10 View