CVEvulnerability

CVE-2009-0269

4.9 MEDIUM Published 2009-01-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-787

Description

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.

Affected configurations

• linux linux kernel (< 2.6.28.1) • opensuse opensuse 10.3 • opensuse opensuse 11.0 • opensuse opensuse 11.1 • debian debian linux 4.0 • debian debian linux 5.0 • canonical ubuntu linux 7.10 • canonical ubuntu linux 8.04 • canonical ubuntu linux 8.10

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

Referenced by CWE · observed example (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-787 Out-of-bounds Write weakness

References