// For flags

CVE-2009-0322

kernel: dell_rbu local oops

Severity Score

4.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/.

drivers/firmware/dell_rbu.c en el Kernel Linux anterior a v2.6.27.13 y v2.6.28.x anterior a v2.6.28.2, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de una llamada al sistema de lectura que especifica cero bytes desde el archivo (1) image_type o (2) packet_size en /sys/devices/platform/dell_rbu/.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-01-28 CVE Reserved
  • 2009-01-28 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-189: Numeric Errors
  • CWE-399: Resource Management Errors
CAPEC
References (34)
URL Tag Source
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=81156928f8fe31621e467490b9d441c0285998c3 X_refsource_confirm
http://secunia.com/advisories/33656 Third Party Advisory
http://secunia.com/advisories/33758 Third Party Advisory
http://secunia.com/advisories/34252 Third Party Advisory
http://secunia.com/advisories/34394 Third Party Advisory
http://secunia.com/advisories/34502 Third Party Advisory
http://secunia.com/advisories/34680 Third Party Advisory
http://secunia.com/advisories/34762 Third Party Advisory
http://secunia.com/advisories/34981 Third Party Advisory
http://secunia.com/advisories/35011 Third Party Advisory
http://secunia.com/advisories/35390 Third Party Advisory
http://secunia.com/advisories/35394 Third Party Advisory
http://secunia.com/advisories/37471 Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm Third Party Advisory
http://www.securityfocus.com/archive/1/507985/100/0/threaded Mailing List
http://www.vmware.com/security/advisories/VMSA-2009-0016.html Third Party Advisory
http://www.vupen.com/english/advisories/2009/3316 Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10163 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7734 Signature
URL Date SRC
URL Date SRC
http://www.securityfocus.com/bid/33428 2023-11-07
URL Date SRC
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.13 2023-11-07
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.2 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html 2023-11-07
http://www.debian.org/security/2009/dsa-1749 2023-11-07
http://www.debian.org/security/2009/dsa-1787 2023-11-07
http://www.debian.org/security/2009/dsa-1794 2023-11-07
http://www.redhat.com/support/errata/RHSA-2009-0326.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2009-0331.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2009-0360.html 2023-11-07
http://www.ubuntu.com/usn/usn-751-1 2023-11-07
https://access.redhat.com/security/cve/CVE-2009-0322 2009-03-27
https://bugzilla.redhat.com/show_bug.cgi?id=482866 2009-03-27
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 < 2.6.27.13
Search vendor "Linux" for product "Linux Kernel" and version " < 2.6.27.13"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 2.6.28 < 2.6.28.2
Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.28 < 2.6.28.2"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 4.0
Search vendor "Debian" for product "Debian Linux" and version "4.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 5.0
Search vendor "Debian" for product "Debian Linux" and version "5.0"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 7.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "7.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"
lts
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.10"
-
Affected