Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1298
HistoryDec 09, 2009 - 12:00 a.m.

CVE-2009-1298

2009-12-0900:00:00
ubuntu.com
ubuntu.com
12

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.283 Low

EPSS

Percentile

96.8%

The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel
2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls
IP_INC_STATS_BH with an incorrect argument, which allows remote attackers
to cause a denial of service (NULL pointer dereference and hang) via long
IP packets, possibly related to the ip_defrag function.

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchlinux<Β 2.6.31-16.53UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.283 Low

EPSS

Percentile

96.8%