Vulnerability DatabaseCVE-2009-1265
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2009-1265
April 08, 2009
Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
Related Resources (26)
http://secunia.com/advisories/35011
http://www.openwall.com/lists/oss-security/2009/04/08/2
http://www.securityfocus.com/bid/34654
http://secunia.com/advisories/35387
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=83e0bbcbe2145f160fbaa109b0439dae7f4a38a9
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html
http://secunia.com/advisories/35121
http://secunia.com/advisories/35185
http://www.mandriva.com/security/advisories?name=MDVSA-2009:119
http://osvdb.org/53631
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
https://people.canonical.com/~ubuntu-security/cve/CVE-2009-1265
http://www.debian.org/security/2009/dsa-1787
http://www.mandriva.com/security/advisories?name=MDVSA-2009:135
http://secunia.com/advisories/35656
http://www.debian.org/security/2009/dsa-1800
http://secunia.com/advisories/35394
http://secunia.com/advisories/34981
http://bugzilla.kernel.org/show_bug.cgi?id=10423
http://osvdb.org/53630
http://www.debian.org/security/2009/dsa-1794
http://www.ubuntu.com/usn/usn-793-1
http://osvdb.org/53571
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
http://secunia.com/advisories/35390
Do you need more information?
Contact Us
CVSS v4
Base Score:
6.9
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE
CVSS v2
Base Score:
5
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
EPSS
Base Score:
2.34