CVE-2009-3613
5.5 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.073 Low
EPSS
Percentile
94.0%
The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.
References
bugzilla.kernel.org/show_bug.cgi?id=9468
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=97d477a914b146e7e6722ded21afa79886ae8ccd
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a866bbf6aacf95f849810079442a20be118ce905
lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
lists.vmware.com/pipermail/security-announce/2010/000082.html
marc.info/?l=oss-security&m=125561712529352&w=2
secunia.com/advisories/37909
secunia.com/advisories/38794
secunia.com/advisories/38834
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.22
www.redhat.com/support/errata/RHSA-2009-1671.html
www.securityfocus.com/bid/36706
www.ubuntu.com/usn/usn-864-1
www.vupen.com/english/advisories/2010/0528
bugzilla.redhat.com/show_bug.cgi?id=529137
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10209
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7377
rhn.redhat.com/errata/RHSA-2009-1540.html
rhn.redhat.com/errata/RHSA-2009-1548.html
Social References
More
Related
5.5 Medium
AI Score
Confidence
High
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.073 Low
EPSS
Percentile
94.0%