CVE-2009-1298

Related Files

Ubuntu Security Notice 869-1

Posted Dec 10, 2009

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 869-1 - David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets. A remote attacker could send specially crafted traffic that would cause a system to crash, leading to a denial of service. (The fix was included in the earlier kernels from USN-864-1.) Akira Fujita discovered that the Ext4 "move extents" ioctl did not correctly check permissions. A local attacker could exploit this to overwrite arbitrary files on the system, leading to root privilege escalation.

tags | advisory, remote, denial of service, arbitrary, kernel, local, root

systems | linux, ubuntu

advisories | CVE-2009-1298, CVE-2009-4131

SHA-256 | 7f47fd71c13c0fa03884c9c33d24664d1e4439bd5e70aae109e817c88809a2c0

Download | Favorite | View

Mandriva Linux Security Advisory 2009-329

Posted Dec 10, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-329 - Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel.

tags | advisory, kernel, vulnerability

systems | linux, mandriva

advisories | CVE-2009-2903, CVE-2009-3547, CVE-2009-3612, CVE-2009-3621, CVE-2009-3638, CVE-2009-3726, CVE-2009-1298, CVE-2009-4131

SHA-256 | 08f4f173bf8eb330eefa90013138ef9fc8a4b99f9374ed90921abb4467c6c6de

Download | Favorite | View