CVE-2009-1298

Linux Kernel 2.6.29-2.6.32 - Denial of Service via IP Fragment Reassembly

Title source: llm
STIX 2.1

Description

The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function.

References (15)

Core 15
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-869-1
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=544144
Various Sources x_refsource_misc
http://twitter.com/spendergrsec/statuses/6339560349
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:329
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/Advisories:rPSA-2009-0161
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/508517/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37624
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/60788
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38017

Scores

EPSS 0.0387
EPSS Percentile 89.0%

Details

CWE
CWE-119
Status published
Products (29)
linux/linux_kernel 2.6.28 (8 CPE variants)
linux/linux_kernel 2.6.28.1
linux/linux_kernel 2.6.28.2
linux/linux_kernel 2.6.28.3
linux/linux_kernel 2.6.28.4
linux/linux_kernel 2.6.28.5
linux/linux_kernel 2.6.28.6
linux/linux_kernel 2.6.28.7
linux/linux_kernel 2.6.28.8
linux/linux_kernel 2.6.28.9
... and 19 more
Published Dec 08, 2009
Tracked Since Feb 18, 2026