Home > Vulnerability Database > CVE-2009-4138

Mend.io Vulnerability Database

CVE-2009-4138

Date: December 16, 2009

drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.

Language: C

Severity Score

5.1

Related Resources (21)

Url: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html

Url: http://support.avaya.com/css/P8/documents/100073666

Url: http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

Url: http://secunia.com/advisories/38276

Url: http://patchwork.kernel.org/patch/66747/

Url: https://bugzilla.redhat.com/show_bug.cgi?id=547236

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-4138

Url: http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log

Url: http://secunia.com/advisories/38017

Url: http://www.openwall.com/lists/oss-security/2009/12/15/1

Url: https://access.redhat.com/security/cve/CVE-2009-4138

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2009-4138

Url: http://www.securityfocus.com/bid/37339

Url: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527

Url: https://rhn.redhat.com/errata/RHSA-2010-0095.html

Url: https://rhn.redhat.com/errata/RHSA-2010-0046.html

Url: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54

Url: http://www.debian.org/security/2010/dsa-2005

Url: https://www.mend.io/vulnerability-database/CVE-2009-4138

Severity Score

5.1

Weakness Type (CWE)

Resource Management Errors

CWE-399

CVSS v3.1

Base Score:	5.1
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

CVSS v2

Base Score:	4.7
Access Vector (AV):	LOCAL
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-4138

Date: December 16, 2009

Language: C

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?