CVE-2009-4536
- State
- Published
- Severity
- Not scored
- Published
- Jan 12, 2010
- Updated
- Aug 7, 2024
- Reserved
- Dec 31, 2009
Description
drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 35265third-party-advisory
- 38276third-party-advisory
- http://marc.info/?t=126203102000001&r=1&w=2
- 1023420vdb-entry
- oval:org.mitre.oval:def:13226vdb-entrysignature
- SUSE-SA:2010:007vendor-advisory
- RHSA-2010:0111vendor-advisory
- 38779third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=552126
- oval:org.mitre.oval:def:12440vdb-entrysignature
- oval:org.mitre.oval:def:10607vdb-entrysignature
- 38296third-party-advisory
- http://blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/
- SUSE-SA:2010:012vendor-advisory
- RHSA-2010:0053vendor-advisory
- SUSE-SA:2010:014vendor-advisory
- RHSA-2010:0882vendor-advisory
- kernel-e1000main-security-bypass(55648)vdb-entry
- DSA-1996vendor-advisory
- RHSA-2010:0019vendor-advisory
- [oss-security] 20091228 CVE requests - kernel security regressions for CVE-2009-1385/and -1389mailing-list
- http://www.vmware.com/security/advisories/VMSA-2011-0009.html
- FEDORA-2010-1787vendor-advisory
- 37519vdb-entry
- [oss-security] 20091229 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389mailing-list
- SUSE-SA:2010:013vendor-advisory
- http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html
- RHSA-2010:0095vendor-advisory
- SUSE-SA:2010:005vendor-advisory
- [oss-security] 20091231 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389mailing-list
- RHSA-2010:0020vendor-advisory
- 38031third-party-advisory
- 38610third-party-advisory
- oval:org.mitre.oval:def:7453vdb-entrysignature
- DSA-2005vendor-advisory
- SUSE-SA:2010:010vendor-advisory
- RHSA-2010:0041vendor-advisory
- 38492third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.