CVE-2009-4537
Description
drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <= 2.6.32.3
Patches
Vulnerability mechanics
References
30- blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/nvdThird Party Advisory
- events.ccc.de/congress/2009/Fahrplan/events/3596.en.htmlnvdThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.htmlnvdMailing ListThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- secunia.com/advisories/38031nvdThird Party Advisory
- secunia.com/advisories/38610nvdThird Party Advisory
- secunia.com/advisories/39742nvdThird Party Advisory
- secunia.com/advisories/39830nvdThird Party Advisory
- secunia.com/advisories/40645nvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- twitter.com/dakami/statuses/7104238406nvdThird Party Advisory
- www.debian.org/security/2010/dsa-2053nvdThird Party Advisory
- www.novell.com/linux/security/advisories/2010_23_kernel.htmlnvdThird Party Advisory
- www.openwall.com/lists/oss-security/2009/12/28/1nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2009/12/29/2nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2009/12/31/1nvdMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0019.htmlnvdThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0020.htmlnvdThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0041.htmlnvdThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0053.htmlnvdThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0111.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/37521nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2010/1857nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/55647nvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7443nvdThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9439nvdThird Party Advisory
- rhn.redhat.com/errata/RHSA-2010-0095.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.