Published: 27/02/2009 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 prior to 2.6.27.19 and 2.6.28 prior to 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.27.12
linux linux kernel 2.6.28
linux linux kernel 2.6.27.3
linux linux kernel 2.6.27.1
linux linux kernel 2.6.27.18
linux linux kernel 2.6.27
linux linux kernel 2.6.27.10
linux linux kernel 2.6.27.17
linux linux kernel 2.6.28.4
linux linux kernel 2.6.27.16
linux linux kernel 2.6.28.2
linux linux kernel 2.6.27.4
linux linux kernel 2.6.28.5
linux linux kernel 2.6.27.13
linux linux kernel 2.6.27.15
linux linux kernel 2.6.27.8
linux linux kernel 2.6.27.9
linux linux kernel 2.6.28.3
linux linux kernel 2.6.27.5
linux linux kernel 2.6.27.7
linux linux kernel 2.6.28.6
linux linux kernel 2.6.27.2
linux linux kernel 2.6.27.11
linux linux kernel 2.6.28.1
linux linux kernel 2.6.27.6
linux linux kernel 2.6.27.14

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service Ubuntu 810 was not affected (CVE-2008-4307) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0029 Christian Borntraeger discovered an issue effecting the alpha, mips, powerpc, s390 and sparc64 architectures that al ...

CWE-20 http://www.vupen.com/english/advisories/2009/0509 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7 http://bugzilla.kernel.org/show_bug.cgi?id=12371 http://www.debian.org/security/2009/dsa-1749 http://secunia.com/advisories/34394 http://www.ubuntu.com/usn/usn-751-1 http://www.vupen.com/english/advisories/2009/3316 http://www.vmware.com/security/advisories/VMSA-2009-0016.html http://secunia.com/advisories/37471 http://osvdb.org/52203 http://secunia.com/advisories/36562 http://rhn.redhat.com/errata/RHSA-2009-1243.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8526 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10683 http://www.securityfocus.com/archive/1/507985/100/0/threaded http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ec110281379826c5cf6ed14735e47027c3c5765 https://nvd.nist.gov https://usn.ubuntu.com/751-1/

CVE-2009-0748

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect