VulnerabilityModified

CVE-2009-4537

HIGH 7.8EPSS 5.89%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (5.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.

CVSS 2.0: 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS: 5.89% probability · 93th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: linux/linux kernel · debian/debian linux
Source: cve@mitre.org

References

http://blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/Third Party Advisory
http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.htmlThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.htmlMailing List, Third Party Advisory
http://marc.info/?l=linux-netdev&m=126202972828626&w=2Mailing List, Third Party Advisory
http://marc.info/?t=126202986900002&r=1&w=2Mailing List, Third Party Advisory
http://secunia.com/advisories/38031Third Party Advisory
http://secunia.com/advisories/38610Third Party Advisory
http://secunia.com/advisories/39742Third Party Advisory
http://secunia.com/advisories/39830Third Party Advisory
http://secunia.com/advisories/40645Third Party Advisory
http://securitytracker.com/id?1023419Third Party Advisory, VDB Entry
http://twitter.com/dakami/statuses/7104238406Third Party Advisory
http://www.debian.org/security/2010/dsa-2053Third Party Advisory
http://www.novell.com/linux/security/advisories/2010_23_kernel.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2009/12/28/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/12/29/2Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/12/31/1Mailing List, Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0019.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0020.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0041.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0053.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0111.htmlThird Party Advisory
http://www.securityfocus.com/bid/37521Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/1857Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=550907Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55647Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7443Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9439Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2010-0095.htmlThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.