CVEvulnerability

CVE-2009-1298

7.8 HIGH Published 2009-12-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-12-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function.

Affected configurations

• linux linux kernel (<= 2.6.32) • linux linux kernel 2.6.28 • linux linux kernel 2.6.28.1 • linux linux kernel 2.6.28.2 • linux linux kernel 2.6.28.3 • linux linux kernel 2.6.28.4 • linux linux kernel 2.6.28.5 • linux linux kernel 2.6.28.6 • linux linux kernel 2.6.28.7 • linux linux kernel 2.6.28.8 • linux linux kernel 2.6.28.9 • linux linux kernel 2.6.28.10 • linux linux kernel 2.6.29 • linux linux kernel 2.6.29.1 • linux linux kernel 2.6.29.2 • linux linux kernel 2.6.29.3 • linux linux kernel 2.6.29.4 • linux linux kernel 2.6.29.5 • linux linux kernel 2.6.29.6 • linux linux kernel 2.6.30 • linux linux kernel 2.6.30.1 • linux linux kernel 2.6.30.2 • linux linux kernel 2.6.30.3 • linux linux kernel 2.6.30.4 • linux linux kernel 2.6.30.5 • linux linux kernel 2.6.30.6 • linux linux kernel 2.6.30.7 • linux linux kernel 2.6.30.8 • linux linux kernel 2.6.30.9 • linux linux kernel 2.6.31 • linux linux kernel 2.6.31.1 • linux linux kernel 2.6.31.2 • linux linux kernel 2.6.31.3 • linux linux kernel 2.6.31.4 • linux linux kernel 2.6.31.5 • linux linux kernel 2.6.31.6 • linux linux kernel 2.6.32

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References