Buffer overflow in Linux Kernel
CVE-2009-1298
The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function.
Vulnerability class: Buffer Overflow
EPSS: 0.039 (89.1th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.6.28, 2.6.28.1, 2.6.28.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_MISC)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (vendor-advisory, x_refsource_MANDRIVA)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)
- security@ubuntu.com (vendor-advisory, x_refsource_FEDORA)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (mailing-list, x_refsource_BUGTRAQ)
- security@ubuntu.com (x_refsource_MISC)
- security@ubuntu.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)