CVE-2009-1265
- State
- Published
- Severity
- Not scored
- Published
- Apr 8, 2009
- Updated
- Aug 7, 2024
- Reserved
- Apr 7, 2009
Description
Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 35390third-party-advisory
- MDVSA-2009:135vendor-advisory
- 53630vdb-entry
- SUSE-SA:2009:028vendor-advisory
- SUSE-SA:2009:032vendor-advisory
- 35656third-party-advisory
- http://bugzilla.kernel.org/show_bug.cgi?id=10423
- DSA-1794vendor-advisory
- 53571vdb-entry
- SUSE-SA:2009:030vendor-advisory
- 35185third-party-advisory
- 35011third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9
- 34654vdb-entry
- [oss-security] 20090408 CVE-2009-1265 kernel: af_rose/x25: Sanity check the maximum user frame sizemailing-list
- SUSE-SA:2009:031vendor-advisory
- USN-793-1vendor-advisory
- 53631vdb-entry
- 34981third-party-advisory
- DSA-1800vendor-advisory
- 35387third-party-advisory
- DSA-1787vendor-advisory
- MDVSA-2009:119vendor-advisory
- 35121third-party-advisory
- 35394third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.