CVE - CVE-2009-1439

CVE-ID
CVE-2009-1439	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:34453 URL:http://www.securityfocus.com/bid/34453 BUGTRAQ:20090516 rPSA-2009-0084-1 kernel URL:http://www.securityfocus.com/archive/1/503610/100/0/threaded BUGTRAQ:20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components URL:http://www.securityfocus.com/archive/1/507985/100/0/threaded CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b363b3304bcf68c4541683b2eff70b29f0446a5b CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0084 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0016.html CONFIRM:https://bugzilla.novell.com/show_bug.cgi?id=492282 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=494275 DEBIAN:DSA-1787 URL:http://www.debian.org/security/2009/dsa-1787 DEBIAN:DSA-1794 URL:http://www.debian.org/security/2009/dsa-1794 DEBIAN:DSA-1800 URL:http://www.debian.org/security/2009/dsa-1800 FEDORA:FEDORA-2009-5356 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html FEDORA:FEDORA-2009-5383 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html MISC:http://blog.fefe.de/?ts=b72905a8 MISC:http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/ MLIST:[linux-cifs-client] 20090406 [PATCH] cifs: Fix insufficient memory allocation for nativeFileSystem field URL:http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html MLIST:[oss-security] 20090405 CVE request? buffer overflow in CIFS in 2.6.* URL:http://www.openwall.com/lists/oss-security/2009/04/04/1 MLIST:[oss-security] 20090407 Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://www.openwall.com/lists/oss-security/2009/04/07/3 MLIST:[oss-security] 20090407 Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://www.openwall.com/lists/oss-security/2009/04/07/7 OVAL:oval:org.mitre.oval:def:10321 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321 OVAL:oval:org.mitre.oval:def:8265 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265 REDHAT:RHSA-2009:1081 URL:http://www.redhat.com/support/errata/RHSA-2009-1081.html SECUNIA:34981 URL:http://secunia.com/advisories/34981 SECUNIA:35011 URL:http://secunia.com/advisories/35011 SECUNIA:35120 URL:http://secunia.com/advisories/35120 SECUNIA:35121 URL:http://secunia.com/advisories/35121 SECUNIA:35185 URL:http://secunia.com/advisories/35185 SECUNIA:35217 URL:http://secunia.com/advisories/35217 SECUNIA:35226 URL:http://secunia.com/advisories/35226 SECUNIA:35343 URL:http://secunia.com/advisories/35343 SECUNIA:35387 URL:http://secunia.com/advisories/35387 SECUNIA:35390 URL:http://secunia.com/advisories/35390 SECUNIA:35394 URL:http://secunia.com/advisories/35394 SECUNIA:35656 URL:http://secunia.com/advisories/35656 SECUNIA:37471 URL:http://secunia.com/advisories/37471 SUSE:SUSE-SA:2009:028 URL:http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html SUSE:SUSE-SA:2009:030 URL:http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html SUSE:SUSE-SA:2009:031 URL:http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html SUSE:SUSE-SA:2009:032 URL:http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html UBUNTU:USN-793-1 URL:http://www.ubuntu.com/usn/usn-793-1 VUPEN:ADV-2009-3316 URL:~~http://www.vupen.com/english/advisories/2009/3316~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20090427	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090427)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)