PT-2009-6761 · Opensuse+2 · Opensuse+2
Eugene Teo
+1
·
Published
1970-01-01
·
Updated
2024-06-15
·
CVE-2009-4536
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 2.6.32.3 and earlier
Red Hat Enterprise Linux kernel versions 2.4.21
Description
The issue allows remote attackers to bypass packet filters via a large packet with a crafted payload. This is due to the e1000 driver in the Linux kernel handling Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame. Multiple vulnerabilities in the kernel packages of Red Hat Enterprise Linux and openSUSE may lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations
For Linux kernel version 2.6.32.3 and earlier, update to a version later than 2.6.32.3 to resolve the issue.
For Red Hat Enterprise Linux kernel versions 2.4.21, update to a version later than 2.4.21 to resolve the issue.
As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.
Fix
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Opensuse