CVEvulnerability
CVE-2009-2903
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-772
Description
Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.
Affected configurations
• linux linux kernel (>= 2.4.0 <= 2.4.37.6)
• linux linux kernel (>= 2.6.0 <= 2.6.31)
• suse linux enterprise debuginfo 10
• suse linux enterprise desktop 10
• suse linux enterprise server 9
• suse linux enterprise server 10
• suse linux enterprise software development kit 10
• canonical ubuntu linux 6.06
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• canonical ubuntu linux 9.04
Related
Weakness · CWE (1)
- CWE-772 Missing Release of Resource after Effective Lifetime weakness
References
- http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html Mailing List, Third Party Advisory
- http://secunia.com/advisories/36707 Third Party Advisory
- http://secunia.com/advisories/37105 Third Party Advisory
- http://secunia.com/advisories/37909 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/14/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/14/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/17/11 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/36379 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-852-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=522331 Issue Tracking, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html Mailing List, Third Party Advisory
- http://secunia.com/advisories/36707 Third Party Advisory
- http://secunia.com/advisories/37105 Third Party Advisory
- http://secunia.com/advisories/37909 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:329 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/14/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/14/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2009/09/17/11 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/36379 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-852-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=522331 Issue Tracking, Third Party Advisory