PRIOn knowledge basePRION:CVE-2009-2903Memory corruption
6.3 Medium
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.039 Low
EPSS
Percentile
91.7%
Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.
References
git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html
lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html
secunia.com/advisories/36707
secunia.com/advisories/37105
secunia.com/advisories/37909
www.mandriva.com/security/advisories?name=MDVSA-2009:329
www.openwall.com/lists/oss-security/2009/09/14/1
www.openwall.com/lists/oss-security/2009/09/14/2
www.openwall.com/lists/oss-security/2009/09/17/11
www.securityfocus.com/bid/36379
www.ubuntu.com/usn/USN-852-1
bugzilla.redhat.com/show_bug.cgi?id=522331
Related
6.3 Medium
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.039 Low
EPSS
Percentile
91.7%