CVE-2009-0065

Published: Jan 7, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.

Affected (109)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

109 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.27
Linux Linux Kernel	Version 2.2.27
Linux Linux Kernel	Version 2.4.36.1
Linux Linux Kernel	Version 2.4.36.2
Linux Linux Kernel	Version 2.4.36.3
Linux Linux Kernel	Version 2.4.36.4
Linux Linux Kernel	Version 2.4.36.5
Linux Linux Kernel	Version 2.4.36.6
Linux Linux Kernel	Version 2.4.36
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.20.16
Linux Linux Kernel	Version 2.6.20.17
Linux Linux Kernel	Version 2.6.20.18
Linux Linux Kernel	Version 2.6.20.19
Linux Linux Kernel	Version 2.6.20.20
Linux Linux Kernel	Version 2.6.20.21
Linux Linux Kernel	Version 2.6.21.5
Linux Linux Kernel	Version 2.6.21.6
Linux Linux Kernel	Version 2.6.21.7
Linux Linux Kernel	Version 2.6.22.10
Linux Linux Kernel	Version 2.6.22.11
Linux Linux Kernel	Version 2.6.22.12
Linux Linux Kernel	Version 2.6.22.13
Linux Linux Kernel	Version 2.6.22.14
Linux Linux Kernel	Version 2.6.22.15
Linux Linux Kernel	Version 2.6.22.17
Linux Linux Kernel	Version 2.6.22.18
Linux Linux Kernel	Version 2.6.22.19
Linux Linux Kernel	Version 2.6.22.1
Linux Linux Kernel	Version 2.6.22.20
Linux Linux Kernel	Version 2.6.22.21
Linux Linux Kernel	Version 2.6.22.22
Linux Linux Kernel	Version 2.6.22.2
Linux Linux Kernel	Version 2.6.22.8
Linux Linux Kernel	Version 2.6.22.9
Linux Linux Kernel	Version 2.6.22
Linux Linux Kernel	Version 2.6.22_rc1
Linux Linux Kernel	Version 2.6.22_rc7
Linux Linux Kernel	Version 2.6.23.10
Linux Linux Kernel	Version 2.6.23.11
Linux Linux Kernel	Version 2.6.23.12
Linux Linux Kernel	Version 2.6.23.13
Linux Linux Kernel	Version 2.6.23.15
Linux Linux Kernel	Version 2.6.23.16
Linux Linux Kernel	Version 2.6.23.17
Linux Linux Kernel	Version 2.6.23.8
Linux Linux Kernel	Version 2.6.23.9
Linux Linux Kernel	Version 2.6.23
Linux Linux Kernel	Version 2.6.23_rc1
Linux Linux Kernel	Version 2.6.24.1
Linux Linux Kernel	Version 2.6.24.2
Linux Linux Kernel	Version 2.6.24.3
Linux Linux Kernel	Version 2.6.24.4
Linux Linux Kernel	Version 2.6.24.5
Linux Linux Kernel	Version 2.6.24.6
Linux Linux Kernel	Version 2.6.24.7
Linux Linux Kernel	Version 2.6.24
Linux Linux Kernel	Version 2.6.24_rc1
Linux Linux Kernel	Version 2.6.24_rc4
Linux Linux Kernel	Version 2.6.24_rc5
Linux Linux Kernel	Version 2.6.25.10
Linux Linux Kernel	Version 2.6.25.10
Linux Linux Kernel	Version 2.6.25.11
Linux Linux Kernel	Version 2.6.25.11
Linux Linux Kernel	Version 2.6.25.12
Linux Linux Kernel	Version 2.6.25.12
Linux Linux Kernel	Version 2.6.25.13
Linux Linux Kernel	Version 2.6.25.14
Linux Linux Kernel	Version 2.6.25.15
Linux Linux Kernel	Version 2.6.25.16
Linux Linux Kernel	Version 2.6.25.17
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25.9
Linux Linux Kernel	Version 2.6.25.9
Linux Linux Kernel	Version 2.6.25
Linux Linux Kernel	Version 2.6.25
Linux Linux Kernel	Version 2.6.26.1
Linux Linux Kernel	Version 2.6.26.2
Linux Linux Kernel	Version 2.6.26.3
Linux Linux Kernel	Version 2.6.26.4
Linux Linux Kernel	Version 2.6.26.5
Linux Linux Kernel	Version 2.6.26
Linux Linux Kernel	Version 2.6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (72)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01832118

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html

Source: cve@mitre.org

http://patchwork.ozlabs.org/patch/15024/

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-0264.html

Source: cve@mitre.org

http://secunia.com/advisories/33674

Source: cve@mitre.org

http://secunia.com/advisories/33854

Source: cve@mitre.org

http://secunia.com/advisories/33858

Source: cve@mitre.org

http://secunia.com/advisories/34252

Source: cve@mitre.org

http://secunia.com/advisories/34394

Source: cve@mitre.org

http://secunia.com/advisories/34680

Source: cve@mitre.org

http://secunia.com/advisories/34762

Source: cve@mitre.org

http://secunia.com/advisories/34981

Source: cve@mitre.org

http://secunia.com/advisories/35011

Source: cve@mitre.org

http://secunia.com/advisories/35174

Source: cve@mitre.org

http://secunia.com/advisories/35390

Source: cve@mitre.org

http://secunia.com/advisories/35394

Source: cve@mitre.org

http://secunia.com/advisories/36191

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1749

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1787

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1794

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/01/05/1

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0053.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0331.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-1055.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/33113

Source: cve@mitre.org

http://www.securitytracker.com/id?1022698

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-751-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0029

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/2193

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=478800

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10872

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg01045.html

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9fcb95a105758b81ef0131cd18e2db5149f13e95