Lucene search

K
nvd[email protected]NVD:CVE-2009-4538
HistoryJan 12, 2010 - 5:30 p.m.

CVE-2009-4538

2010-01-1217:30:00
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.2%

drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to CVE-2009-4537.

Affected configurations

NVD
Node
linuxlinux_kernelRange2.6.32.3
Node
debiandebian_linuxMatch4.0
OR
debiandebian_linuxMatch5.0

References

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.2%