CVE-2009-1250
CVE-2009-1250
Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.
The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.
EPSS 4,0% · Есть исправление
- Опубликовано
- Обновлено
Стек: system
Затронутые продукты и версии
Первоисточники
- http://www.vupen.com/english/advisories/2011/0117
- http://www.openafs.org/security/openafs-sa-2009-002.patch
- http://www.openafs.org/security/OPENAFS-SA-2009-002.txt
- http://www.vupen.com/english/advisories/2009/0984
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:099
- http://www.securityfocus.com/bid/34404
- http://secunia.com/advisories/36310
- http://secunia.com/advisories/34655
- http://www.debian.org/security/2009/dsa-1768
- http://www-1.ibm.com/support/docview.wss?uid=swg1ID71123
- http://www-01.ibm.com/support/docview.wss?uid=swg21396389
- http://security.gentoo.org/glsa/glsa-201101-05.xml
- http://secunia.com/advisories/34684
- http://secunia.com/advisories/42896
- https://nvd.nist.gov/vuln/detail/CVE-2009-1250