PT-2009-6767 · Opensuse+2 · Opensuse+2

Published 1970-01-01 · Updated 2018-10-10 · CVE-2009-4308

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openSUSE kernel-ps3-debuginfo versions (affected versions not specified) openSUSE kernel-ps3-debugsource versions (affected versions not specified) Linux kernel versions prior to 2.6.32

Description The issue affects the confidentiality, integrity, and availability of protected information. Exploitation can be done remotely. In the Linux kernel, the ext4 decode error function in fs/ext4/super.c allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference) via a crafted read-only filesystem that lacks a journal.

Recommendations For openSUSE kernel-ps3-debuginfo, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For openSUSE kernel-ps3-debugsource, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Linux kernel versions prior to 2.6.32, update to version 2.6.32 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted read-only filesystems that lack a journal to minimize the risk of exploitation.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-05250

BDU:2015-05251

CVE-2009-4308

DSA-2005-1

RHSA-2010:0147

RHSA-2010_0147

Affected Products

Linux Kernel

Red Hat

Opensuse

References · 27

• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4308 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:198 · Vendor Advisory
• http://debian.org/security/2010/dsa-2005 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05250 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0147.html · Vendor Advisory
• http://secunia.com/advisories/37658 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05251 · Security Note
• https://suse.com/support/security/advisories/2010_05_kernel.html · Note
• http://vmware.com/security/advisories/VMSA-2011-0003.html · Note
• http://secunia.com/advisories/38276 · Note
• http://securityfocus.com/archive/1/516397/100/0/threaded · Note
• https://access.redhat.com/security/cve/CVE-2009-4308 · Note