CVE - CVE-2009-1633

CVE-ID
CVE-2009-1633	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20090724 rPSA-2009-0111-1 kernel URL:http://www.securityfocus.com/archive/1/505254/100/0/threaded BUGTRAQ:20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components URL:http://www.securityfocus.com/archive/1/507985/100/0/threaded MLIST:[oss-security] 20090429 Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://marc.info/?l=oss-security&m=124099284225229&w=2 MLIST:[oss-security] 20090429 Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://marc.info/?l=oss-security&m=124099371726547&w=2 MLIST:[oss-security] 20090514 Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://www.openwall.com/lists/oss-security/2009/05/14/4 MLIST:[oss-security] 20090514 Update - Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://www.openwall.com/lists/oss-security/2009/05/14/1 MLIST:[oss-security] 20090515 Re: Re: Update - Re: CVE request? buffer overflow in CIFS in 2.6.* URL:http://www.openwall.com/lists/oss-security/2009/05/15/2 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git;a=commit;h=7b0c8fcff47a885743125dd843db64af41af5a61 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git;a=commit;h=968460ebd8006d55661dec0fb86712b40d71c413 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=27b87fe52baba0a55e9723030e76fce94fabcea4 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.4 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=496572 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0111 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0016.html DEBIAN:DSA-1809 URL:http://www.debian.org/security/2009/dsa-1809 DEBIAN:DSA-1844 URL:http://www.debian.org/security/2009/dsa-1844 DEBIAN:DSA-1865 URL:http://www.debian.org/security/2009/dsa-1865 FEDORA:FEDORA-2009-5356 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html FEDORA:FEDORA-2009-5383 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html MANDRIVA:MDVSA-2009:148 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:148 REDHAT:RHSA-2009:1157 URL:http://www.redhat.com/support/errata/RHSA-2009-1157.html SUSE:SUSE-SA:2009:054 URL:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html SUSE:SUSE-SA:2009:056 URL:http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html SUSE:SUSE-SA:2010:012 URL:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html UBUNTU:USN-793-1 URL:http://www.ubuntu.com/usn/usn-793-1 BID:34612 URL:http://www.securityfocus.com/bid/34612 OVAL:oval:org.mitre.oval:def:8588 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8588 OVAL:oval:org.mitre.oval:def:9525 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9525 SECUNIA:35226 URL:http://secunia.com/advisories/35226 SECUNIA:35298 URL:http://secunia.com/advisories/35298 SECUNIA:35217 URL:http://secunia.com/advisories/35217 SECUNIA:36051 URL:http://secunia.com/advisories/36051 SECUNIA:35847 URL:http://secunia.com/advisories/35847 SECUNIA:36327 URL:http://secunia.com/advisories/36327 SECUNIA:37351 URL:http://secunia.com/advisories/37351 SECUNIA:37471 URL:http://secunia.com/advisories/37471 SECUNIA:35656 URL:http://secunia.com/advisories/35656 VUPEN:ADV-2009-3316 URL:http://www.vupen.com/english/advisories/2009/3316
Assigning CNA
N/A
Date Entry Created
20090514	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090514)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org