CVEvulnerability
CVE-2009-4138
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
Affected configurations
• linux linux kernel (<= 2.6.32)
• linux linux kernel 2.6.0
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.3
• linux linux kernel 2.6.4
• linux linux kernel 2.6.5
• linux linux kernel 2.6.6
• linux linux kernel 2.6.7
• linux linux kernel 2.6.8
• linux linux kernel 2.6.8.1
• linux linux kernel 2.6.9
• linux linux kernel 2.6.10
• linux linux kernel 2.6.11
• linux linux kernel 2.6.11.1
• linux linux kernel 2.6.11.2
• linux linux kernel 2.6.11.3
• linux linux kernel 2.6.11.4
• linux linux kernel 2.6.11.5
• linux linux kernel 2.6.11.6
• linux linux kernel 2.6.11.7
• linux linux kernel 2.6.11.8
• linux linux kernel 2.6.11.9
• linux linux kernel 2.6.11.10
• linux linux kernel 2.6.11.11
• linux linux kernel 2.6.11.12
• linux linux kernel 2.6.12
• linux linux kernel 2.6.12.1
• linux linux kernel 2.6.12.2
• linux linux kernel 2.6.12.3
• linux linux kernel 2.6.12.4
• linux linux kernel 2.6.12.5
• linux linux kernel 2.6.12.6
• linux linux kernel 2.6.13
• linux linux kernel 2.6.13.1
• linux linux kernel 2.6.13.2
• linux linux kernel 2.6.13.3
• linux linux kernel 2.6.13.4
• linux linux kernel 2.6.13.5
• linux linux kernel 2.6.14
• linux linux kernel 2.6.14.1
• linux linux kernel 2.6.14.2
• linux linux kernel 2.6.14.3
• linux linux kernel 2.6.14.4
• linux linux kernel 2.6.14.5
• linux linux kernel 2.6.14.6
• linux linux kernel 2.6.14.7
• linux linux kernel 2.6.15
• linux linux kernel 2.6.15.1
• linux linux kernel 2.6.15.2
• linux linux kernel 2.6.15.3
• linux linux kernel 2.6.15.4
• linux linux kernel 2.6.15.5
• linux linux kernel 2.6.15.6
• linux linux kernel 2.6.15.7
• linux linux kernel 2.6.16
• linux linux kernel 2.6.16.1
• linux linux kernel 2.6.16.2
• linux linux kernel 2.6.16.3
• linux linux kernel 2.6.16.4
… and 264 more
Related
Weakness · not in database (1)
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html lists.opensuse.org
- http://patchwork.kernel.org/patch/66747/ Patch
- http://secunia.com/advisories/38017 secunia.com
- http://secunia.com/advisories/38276 secunia.com
- http://support.avaya.com/css/P8/documents/100073666 support.avaya.com
- http://www.debian.org/security/2010/dsa-2005 www.debian.org
- http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log www.kernel.org
- http://www.openwall.com/lists/oss-security/2009/12/15/1 Patch
- http://www.securityfocus.com/bid/37339 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=547236 Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527 oval.cisecurity.org
- https://rhn.redhat.com/errata/RHSA-2010-0046.html rhn.redhat.com
- https://rhn.redhat.com/errata/RHSA-2010-0095.html rhn.redhat.com
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54 git.kernel.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html lists.opensuse.org
- http://patchwork.kernel.org/patch/66747/ Patch
- http://secunia.com/advisories/38017 secunia.com
- http://secunia.com/advisories/38276 secunia.com
- http://support.avaya.com/css/P8/documents/100073666 support.avaya.com
- http://www.debian.org/security/2010/dsa-2005 www.debian.org
- http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log www.kernel.org
- http://www.openwall.com/lists/oss-security/2009/12/15/1 Patch
- http://www.securityfocus.com/bid/37339 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=547236 Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527 oval.cisecurity.org
- https://rhn.redhat.com/errata/RHSA-2010-0046.html rhn.redhat.com
- https://rhn.redhat.com/errata/RHSA-2010-0095.html rhn.redhat.com