PT-2009-3785 · Linux · Linux Kernel

Eugene Teo · Publicado 2009-04-06 · Atualizado 2024-02-15 · CVE-2009-1243

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.29.1

Description The issue is related to the "udp seq file infrastructure" in the Linux kernel. It allows local users to cause a denial of service (panic) by reading zero bytes from the /proc/net/udp file and other unspecified files due to an incorrect unlocking step.

Recommendations For Linux kernel versions prior to 2.6.29.1, update to version 2.6.29.1 or later to resolve the issue.

Correção

Improper Locking

Enumeração de Fraquezas

CWE-667

Identificadores relacionados

CVE-2009-1243

Produtos afetados

Linux Kernel

Referências · 9

• http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-proc-net-udp-8586 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-1243 · Nota de Segurança
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1 · Nota
• http://vupen.com/english/advisories/2009/0924 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49595 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=30842f2989aacfaba3ccb39829b3417be9313dbe · Nota
• http://secunia.com/advisories/34478 · Nota
• http://openwall.com/lists/oss-security/2009/04/01/4 · Correção
• http://securityfocus.com/bid/34329 · Correção