CVE-2009-1389

CVE Details

Release Date:

2009-06-16

Description

Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet. drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.

See more information about CVE-2009-1389 from MITRE CVE dictionary and NIST NVD

CVSS v2.0 metrics

NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score:	7.8	Base Metrics:	AV:N/AC:L/Au:N/C:N/I:N/A:C
Access Vector:	Network	Attack Complexity:	Low
Authentication:	None required	Confidentiality Impact:	None
Integrity Impact:	None	Availability Impact:	Complete

Errata information

Platform	Errata	Release Date
Oracle Enterprise Linux version 4 (kernel)	ELSA-2009-1211	2009-08-13
Oracle Enterprise Linux version 4 (ocfs2-2.6.9-89.0.7.0.1.EL)	ELSA-2009-1211	2009-08-13
Oracle Enterprise Linux version 4 (oracleasm-2.6.9-89.0.7.0.1.EL)	ELSA-2009-1211	2009-08-13
Oracle Linux version 5 (kernel)	ELSA-2009-1193	2009-08-04
Oracle Linux version 5 (ocfs2-2.6.18-128.4.1.0.1.el5)	ELSA-2009-1193	2009-08-04
Oracle Linux version 5 (oracleasm-2.6.18-128.4.1.0.1.el5)	ELSA-2009-1193	2009-08-04

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team