CVE-2009-2844
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
cfg80211 en el archivo net/wireless/scan.c en el kernel de Linux versión 2.6.30-rc1 y otras versiones anteriores a 2.6.31-rc6, permite a los atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de una secuencia de tramas beacon en los que una trama omite un Elemento de Información (IE) SSID y la trama posterior contiene un IE SSID, que desencadena una desreferencia de un puntero NULL en la función cmp_ies. NOTA: también se abordó una potencial debilidad en la función is_mesh, pero la condición relevante no existía en el código, por lo que no es una vulnerabilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-08-18 CVE Reserved
- 2009-08-18 CVE Published
- 2023-11-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520e | X_refsource_confirm | |
| http://secunia.com/advisories/36278 | Third Party Advisory | |
| http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5 | X_refsource_confirm | |
| http://www.securityfocus.com/bid/36052 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://jon.oberheide.org/files/cfg80211-remote-dos.c | 2023-11-07 | |
| http://www.openwall.com/lists/oss-security/2009/08/17/1 | 2023-11-07 | |
| http://www.openwall.com/lists/oss-security/2009/08/17/2 | 2023-11-07 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Kernel Search vendor "Linux" for product "Kernel" | 2.6.24.7 Search vendor "Linux" for product "Kernel" and version "2.6.24.7" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Kernel Search vendor "Linux" for product "Kernel" | 2.6.25.15 Search vendor "Linux" for product "Kernel" and version "2.6.25.15" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | <= 2.6.16.31 Search vendor "Linux" for product "Linux Kernel" and version " <= 2.6.16.31" | -rc5 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.10" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.3" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.5" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.6" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.7" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.8" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.9 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.9" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.10" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.11" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.11.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.12" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.3" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.5" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.12.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.6" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.13 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.13.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.13.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.13.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.3" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.13.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.13.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13.5" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.3" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.5" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.6" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.14.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.7" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.3" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.4" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.5" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.6" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.15.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.15.7" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.1" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.2" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.3" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.10" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.11" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.12" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.13 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.13" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.14" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.15" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.16" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.17" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.18" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.19 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.19" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.20 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.20" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.21" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.22" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.23" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.24 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.24" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.25 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.25" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.26 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.26" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.27 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.27" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.28 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.28" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.29 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.29" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.30 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.30" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.31 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.31" | - |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.31 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.31" | -rc1 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.31 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.31" | -rc2 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.31 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.31" | -rc3 |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 2.6.16.31 Search vendor "Linux" for product "Linux Kernel" and version "2.6.16.31" | -rc4 |
Affected
| ||||||