Lucene search

[email protected]CVE-2009-2844

HistoryAug 18, 2009 - 9:00 p.m.

CVE-2009-2844

2009-08-1821:00:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2009-2844

linux kernel

denial of service

remote attackers

crash

net/wireless/scan.c

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.

Affected configurations

NVD

Node

linuxkernelMatch2.6.24.7

linuxkernelMatch2.6.25.15

linuxlinux_kernelRange≤2.6.16.31-rc5

linuxlinux_kernelMatch2.6

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11.1

linuxlinux_kernelMatch2.6.11.2

linuxlinux_kernelMatch2.6.11.3

linuxlinux_kernelMatch2.6.11.4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.9

linuxlinux_kernelMatch2.6.11.10

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.12

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.12.5

linuxlinux_kernelMatch2.6.12.6

linuxlinux_kernelMatch2.6.13

linuxlinux_kernelMatch2.6.13.1

linuxlinux_kernelMatch2.6.13.2

linuxlinux_kernelMatch2.6.13.3

linuxlinux_kernelMatch2.6.13.4

linuxlinux_kernelMatch2.6.13.5

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

linuxlinux_kernelMatch2.6.14.4

linuxlinux_kernelMatch2.6.14.5

linuxlinux_kernelMatch2.6.14.6

linuxlinux_kernelMatch2.6.14.7

linuxlinux_kernelMatch2.6.15

linuxlinux_kernelMatch2.6.15.1

linuxlinux_kernelMatch2.6.15.2

linuxlinux_kernelMatch2.6.15.3

linuxlinux_kernelMatch2.6.15.4

linuxlinux_kernelMatch2.6.15.5

linuxlinux_kernelMatch2.6.15.6

linuxlinux_kernelMatch2.6.15.7

linuxlinux_kernelMatch2.6.16

linuxlinux_kernelMatch2.6.16.1

linuxlinux_kernelMatch2.6.16.2

linuxlinux_kernelMatch2.6.16.3

linuxlinux_kernelMatch2.6.16.10

linuxlinux_kernelMatch2.6.16.11

linuxlinux_kernelMatch2.6.16.12

linuxlinux_kernelMatch2.6.16.13

linuxlinux_kernelMatch2.6.16.14

linuxlinux_kernelMatch2.6.16.15

linuxlinux_kernelMatch2.6.16.16

linuxlinux_kernelMatch2.6.16.17

linuxlinux_kernelMatch2.6.16.18

linuxlinux_kernelMatch2.6.16.19

linuxlinux_kernelMatch2.6.16.20

linuxlinux_kernelMatch2.6.16.21

linuxlinux_kernelMatch2.6.16.22

linuxlinux_kernelMatch2.6.16.23

linuxlinux_kernelMatch2.6.16.24

linuxlinux_kernelMatch2.6.16.25

linuxlinux_kernelMatch2.6.16.26

linuxlinux_kernelMatch2.6.16.27

linuxlinux_kernelMatch2.6.16.28

linuxlinux_kernelMatch2.6.16.29

linuxlinux_kernelMatch2.6.16.30

linuxlinux_kernelMatch2.6.16.31

linuxlinux_kernelMatch2.6.16.31-rc1

linuxlinux_kernelMatch2.6.16.31-rc2

linuxlinux_kernelMatch2.6.16.31-rc3

linuxlinux_kernelMatch2.6.16.31-rc4

CPENameOperatorVersion
linux:kernellinux kerneleq2.6.24.7
linux:kernellinux kerneleq2.6.25.15
linux:linux_kernellinux linux kernelle2.6.16.31
linux:linux_kernellinux linux kerneleq2.6
linux:linux_kernellinux linux kerneleq2.6.0
linux:linux_kernellinux linux kerneleq2.6.1
linux:linux_kernellinux linux kerneleq2.6.10
linux:linux_kernellinux linux kerneleq2.6.11
linux:linux_kernellinux linux kerneleq2.6.11.1
linux:linux_kernellinux linux kerneleq2.6.11.2

CPE	Name	Operator	Version
linux:kernel	linux kernel	eq	2.6.24.7
linux:kernel	linux kernel	eq	2.6.25.15
linux:linux_kernel	linux linux kernel	le	2.6.16.31
linux:linux_kernel	linux linux kernel	eq	2.6
linux:linux_kernel	linux linux kernel	eq	2.6.0
linux:linux_kernel	linux linux kernel	eq	2.6.1
linux:linux_kernel	linux linux kernel	eq	2.6.10
linux:linux_kernel	linux linux kernel	eq	2.6.11
linux:linux_kernel	linux linux kernel	eq	2.6.11.1
linux:linux_kernel	linux linux kernel	eq	2.6.11.2

Rows per page:

1-10 of 741

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e

jon.oberheide.org/files/cfg80211-remote-dos.c

secunia.com/advisories/36278

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5

www.openwall.com/lists/oss-security/2009/08/17/1

www.openwall.com/lists/oss-security/2009/08/17/2

www.securityfocus.com/bid/36052

Social References

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.05 Low

EPSS

Percentile

92.9%

JSON

Related for CVE-2009-2844

redhatcve1 nvd1 ubuntucve1 prion1 cvelist1