PT-2009-6757 · Intel+9 · Intel-Iamt-Heci-Kmp-Debug+17

Pavel Emelyanov · Published 1970-01-01 · Updated 2012-03-19 · CVE-2009-1360

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions dazuko-kmp-debug (affected versions not specified) intel-iamt-heci-kmp-trace (affected versions not specified) ofed-kmp-debug (affected versions not specified) aufs-kmp-debug (affected versions not specified) kqemu-kmp-debug (affected versions not specified) drbd-kmp-debug (affected versions not specified) ofed-kmp-trace (affected versions not specified) iscsitarget-kmp-trace (affected versions not specified) pcfclock-kmp-trace (affected versions not specified) intel-iamt-heci-kmp-debug (affected versions not specified) kqemu-kmp-trace (affected versions not specified) dazuko-kmp-trace (affected versions not specified) drbd-kmp-trace (affected versions not specified) iscsitarget-kmp-debug (affected versions not specified) pcfclock-kmp-debug (affected versions not specified) aufs-kmp-trace (affected versions not specified) kvm-kmp-trace (affected versions not specified) Linux kernel versions prior to 2.6.29

Description The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. In the Linux kernel, the inet6 check established function allows remote attackers to cause a denial of service via vectors involving IPv6 packets when Network Namespace Support is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-05202

BDU:2015-05203

BDU:2015-05204

BDU:2015-05205

BDU:2015-05206

BDU:2015-05207

BDU:2015-05208

BDU:2015-05209

BDU:2015-05210

BDU:2015-05211

BDU:2015-05212

BDU:2015-05213

BDU:2015-05214

BDU:2015-05215

BDU:2015-05216

BDU:2015-05217

BDU:2015-05218

CVE-2009-1360

Affected Products

Linux Kernel

Aufs-Kmp-Debug

Aufs-Kmp-Trace

Dazuko-Kmp-Debug

Dazuko-Kmp-Trace

Drbd-Kmp-Debug

Drbd-Kmp-Trace

Intel-Iamt-Heci-Kmp-Debug

Intel-Iamt-Heci-Kmp-Trace

Iscsitarget-Kmp-Debug

Iscsitarget-Kmp-Trace

Kqemu-Kmp-Debug

Kqemu-Kmp-Trace

Kvm-Kmp-Trace

Ofed-Kmp-Debug

Ofed-Kmp-Trace

Pcfclock-Kmp-Debug

Pcfclock-Kmp-Trace

References · 28

• 🔥 http://xorl.wordpress.com/2009/04/21/linux-kernel-net_ns-ipv6-null-pointer-dereference · Exploit
• https://bdu.fstec.ru/vul/2015-05212 · Security Note
• https://bdu.fstec.ru/vul/2015-05216 · Security Note
• https://bdu.fstec.ru/vul/2015-05215 · Security Note
• https://bdu.fstec.ru/vul/2015-05202 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:135 · Vendor Advisory
• http://ubuntu.com/usn/usn-793-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05214 · Security Note
• https://bdu.fstec.ru/vul/2015-05218 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05213 · Security Note
• https://bdu.fstec.ru/vul/2015-05207 · Security Note
• https://bdu.fstec.ru/vul/2015-05208 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-1360 · Security Note
• https://bdu.fstec.ru/vul/2015-05217 · Security Note