National Cyber Awareness System

Vulnerability Summary for CVE-2009-4536

Overview

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: REDHAT

Name: RHSA-2010:0095

Hyperlink:https://rhn.redhat.com/errata/RHSA-2010-0095.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=552126

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=552126

External Source: XF

Name: kernel-e1000main-security-bypass(55648)

Hyperlink:http://xforce.iss.net/xforce/xfdb/55648

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2011-0009.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2011-0009.html

External Source: BID

Name: 37519

Hyperlink:http://www.securityfocus.com/bid/37519

External Source: REDHAT

Name: RHSA-2010:0882

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0882.html

External Source: REDHAT

Name: RHSA-2010:0111

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0111.html

External Source: REDHAT

Name: RHSA-2010:0053

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0053.html

External Source: REDHAT

Name: RHSA-2010:0041

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0041.html

External Source: REDHAT

Name: RHSA-2010:0020

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0020.html

External Source: REDHAT

Name: RHSA-2010:0019

Hyperlink:http://www.redhat.com/support/errata/RHSA-2010-0019.html

External Source: MLIST

Name: [oss-security] 20091231 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389

Hyperlink:http://www.openwall.com/lists/oss-security/2009/12/31/1

External Source: MLIST

Name: [oss-security] 20091229 Re: CVE requests - kernel security regressions for CVE-2009-1385/and -1389

Hyperlink:http://www.openwall.com/lists/oss-security/2009/12/29/2

External Source: MLIST

Name: [oss-security] 20091228 CVE requests - kernel security regressions for CVE-2009-1385/and -1389

Hyperlink:http://www.openwall.com/lists/oss-security/2009/12/28/1

External Source: DEBIAN

Name: DSA-2005

Hyperlink:http://www.debian.org/security/2010/dsa-2005

External Source: DEBIAN

Name: DSA-1996

Hyperlink:http://www.debian.org/security/2010/dsa-1996

External Source: SECTRACK

Name: 1023420

Hyperlink:http://securitytracker.com/id?1023420

External Source: SECUNIA

Name: 38779

Hyperlink:http://secunia.com/advisories/38779

External Source: SECUNIA

Name: 38610

Hyperlink:http://secunia.com/advisories/38610

External Source: SECUNIA

Name: 38492

Hyperlink:http://secunia.com/advisories/38492

External Source: SECUNIA

Name: 38296

Hyperlink:http://secunia.com/advisories/38296

External Source: SECUNIA

Name: 38276

Hyperlink:http://secunia.com/advisories/38276

External Source: SECUNIA

Name: 38031

Type: Advisory

Hyperlink:http://secunia.com/advisories/38031

External Source: SECUNIA

Name: 35265

Type: Advisory

Hyperlink:http://secunia.com/advisories/35265

External Source: OVAL

Name: oval:org.mitre.oval:def:7453

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7453

External Source: OVAL

Name: oval:org.mitre.oval:def:13226

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13226

External Source: OVAL

Name: oval:org.mitre.oval:def:12440

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12440

External Source: OVAL

Name: oval:org.mitre.oval:def:10607

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10607

External Source: CONFIRM

Name: http://marc.info/?t=126203102000001&r=1&w=2

Hyperlink:http://marc.info/?t=126203102000001&r=1&w=2

External Source: SUSE

Name: SUSE-SA:2010:014

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html

External Source: SUSE

Name: SUSE-SA:2010:013

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html

External Source: SUSE

Name: SUSE-SA:2010:012

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html

External Source: SUSE

Name: SUSE-SA:2010:010

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html

External Source: SUSE

Name: SUSE-SA:2010:007

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html

External Source: SUSE

Name: SUSE-SA:2010:005

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html

External Source: FEDORA

Name: FEDORA-2010-1787

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html

External Source: MISC

Name: http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html

Hyperlink:http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html

External Source: MISC

Name: http://blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/

Hyperlink:http://blog.c22.cc/2009/12/27/26c3-cat-procsysnetipv4fuckups/

References to Check Content

Identifier:oval:org.mitre.oval:def:10607

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10607

Identifier:oval:org.mitre.oval:def:13226

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:13226

Identifier:oval:org.mitre.oval:def:12440

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:12440

Identifier:oval:org.mitre.oval:def:7453

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7453