CVSS: 7.8EPSS: 3%CPEs: 331EXPL: 0CVE-2009-4308 – kernel: ext4: Avoid null pointer dereference when decoding EROFS w/o a journal
https://notcve.org/view.php?id=CVE-2009-4308
13 Dec 2009 — The ext4_decode_error function in fs/ext4/super.c in the ext4 filesystem in the Linux kernel before 2.6.32 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference), and possibly have unspecified other impact, via a crafted read-only filesystem that lacks a journal. La funcion ext4_decode_error en fs/ext4/super.c en el sistema de ficheros ext4 en el kernel de Linux anteriores a v2.6.32 permite a atacantes remotos asistidos por el usuario producir una denegación de servici... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78f1ddbb498283c2445c11b0dfa666424c301803 • CWE-399: Resource Management Errors CWE-476: NULL Pointer Dereference •
CVSS: 7.1EPSS: 2%CPEs: 332EXPL: 1CVE-2009-4307 – kernel: ext4: avoid divide by zero when trying to mount a corrupted file system
https://notcve.org/view.php?id=CVE-2009-4307
13 Dec 2009 — The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 2.6.32-git6 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). La funcion ext4_fill_flex_info en fs/ext4/super.c en el kernel de Linux anteriores a v2.6.32-git6 permite a atacantes remotos asistidos por el usuario producir una denegación de servicio (error de ... • http://bugzilla.kernel.org/show_bug.cgi?id=14287 • CWE-189: Numeric Errors •
CVSS: 7.2EPSS: 0%CPEs: 340EXPL: 1CVE-2009-4131 – Linux Kernel 2.6.x - Ext4 'move extents' ioctl Privilege Escalation
https://notcve.org/view.php?id=CVE-2009-4131
13 Dec 2009 — The EXT4_IOC_MOVE_EXT (aka move extents) ioctl implementation in the ext4 filesystem in the Linux kernel before 2.6.32-git6 allows local users to overwrite arbitrary files via a crafted request, related to insufficient checks for file permissions. La implementación ioctl EXT4_IOC_MOVE_EXT (tambien conocido como move extents) en el sistema de ficheros ext4 en el kernel de Linux en versiones anteriores a v2.6.32-git6 permite a usuarios locales sobrescribir ficheros arbitrariamente a través de peticiones manip... • https://www.exploit-db.com/exploits/33395 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 11%CPEs: 68EXPL: 0CVE-2009-1298
https://notcve.org/view.php?id=CVE-2009-1298
08 Dec 2009 — The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function. La función ip_frag_reasm en el archivo net/ipv4/ip_fragment.c en el kernel de Linux versiones 2.6.32-rc8, y 2.6.29 y versiones posteriores anteriores a 2.6.32, llama a IP_I... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=bbf31bf18d34caa87dd01f08bf713635593697f2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 3%CPEs: 335EXPL: 0CVE-2009-4026
https://notcve.org/view.php?id=CVE-2009-4026
02 Dec 2009 — The mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch." El subsistema mac80211 en el kernel de linux anterior a 2.6.32-rc8-next-20091201, permite a atacantes remotos provocar una denegación de servicio (panic) a través de un un Delete Block ACK (también conocido como DELBA) manipulado. Relacionado con un "code shuffling patch" erró... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7 •
CVSS: 7.8EPSS: 5%CPEs: 335EXPL: 0CVE-2009-4027 – kernel: mac80211: fix spurious delBA handling
https://notcve.org/view.php?id=CVE-2009-4027
02 Dec 2009 — Race condition in the mac80211 subsystem in the Linux kernel before 2.6.32-rc8-next-20091201 allows remote attackers to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation session. Condición de carrera en el subsistema mac80211 en el kernel de Linux anteriores a 2.6.32-rc8-next-20091201 permite a atacantes remotos producir una denegación de servicio (caída de sistema) a través de un paquete de bloque de borr... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=827d42c9ac91ddd728e4f4a31fefb906ef2ceff7 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-617: Reachable Assertion •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2009-4031 – kernel: KVM: x86 emulator: limit instructions to 15 bytes
https://notcve.org/view.php?id=CVE-2009-4031
27 Nov 2009 — The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support. La función do_insn_fetch en arch/x86/kvm/emulate.c en el emulador x86 KVM en el subsystem del kernel de Linux anterior a 2.6.32-rc8-next... • http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88 • CWE-20: Improper Input Validation •
CVSS: 7.1EPSS: 0%CPEs: 335EXPL: 0CVE-2009-4021 – kernel: fuse: prevent fuse_put_request on invalid pointer
https://notcve.org/view.php?id=CVE-2009-4021
25 Nov 2009 — The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack. La funcion fuse_direct_io en fs/fuse/file.c en el subsistema fuse en el kernel de Linux en versiones anteriores a v2.6.32-rc7 podría permitir a atacantes producir una denegación de servicio (desreferencia a puntero no valido y OOPS) a través de vectores q... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f60311d5f7670d9539b424e4ed8b5c0872fc9e83 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 0CVE-2009-3080 – kernel: gdth: Prevent negative offsets in ioctl
https://notcve.org/view.php?id=CVE-2009-3080
20 Nov 2009 — Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request. Error de indice de matriz en la función gdth_read_event en drivers/scsi/gdth.c en el kernel de Linux antes de v2.6.32-RC8 permite a usuarios locales provocar una denegación de servicio o posiblemente obtener privilegios a través de un índice de evento negativo en una solicitud... • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-129: Improper Validation of Array Index •
CVSS: 9.8EPSS: 0%CPEs: 335EXPL: 0CVE-2009-4005 – kernel: isdn: hfc_usb: fix read buffer overflow
https://notcve.org/view.php?id=CVE-2009-4005
20 Nov 2009 — The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read. La función collect_rx_frame en drivers/isdn/hisax/hfc_usb.c en el kernel Linux anteriores a v2.6.32-rc7 permite a los atacantes tener un impacto no especificado a través de paquetes manipulados HDLC que llegan sobre ISD y lanzan una lectura de búfer por debajo del límite inferior. • http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=286e633ef0ff5bb63c07b4516665da8004966fec • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •