CVE-2009-0746

Published: Feb 27, 2009Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.

Affected (26)

Products: Linux: Linux Kernel

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.27.10
Linux Linux Kernel	Version 2.6.27.11
Linux Linux Kernel	Version 2.6.27.12
Linux Linux Kernel	Version 2.6.27.13
Linux Linux Kernel	Version 2.6.27.14
Linux Linux Kernel	Version 2.6.27.15
Linux Linux Kernel	Version 2.6.27.16
Linux Linux Kernel	Version 2.6.27.17
Linux Linux Kernel	Version 2.6.27.18
Linux Linux Kernel	Version 2.6.27.1
Linux Linux Kernel	Version 2.6.27.2
Linux Linux Kernel	Version 2.6.27.3
Linux Linux Kernel	Version 2.6.27.4
Linux Linux Kernel	Version 2.6.27.5
Linux Linux Kernel	Version 2.6.27.6
Linux Linux Kernel	Version 2.6.27.7
Linux Linux Kernel	Version 2.6.27.8
Linux Linux Kernel	Version 2.6.27.9
Linux Linux Kernel	Version 2.6.27
Linux Linux Kernel	Version 2.6.28.1
Linux Linux Kernel	Version 2.6.28.2
Linux Linux Kernel	Version 2.6.28.3
Linux Linux Kernel	Version 2.6.28.4
Linux Linux Kernel	Version 2.6.28.5
Linux Linux Kernel	Version 2.6.28.6
Linux Linux Kernel	Version 2.6.28

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (36)

http://bugzilla.kernel.org/show_bug.cgi?id=12430

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7

Source: cve@mitre.org

http://osvdb.org/52202

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1243.html

Source: cve@mitre.org

http://secunia.com/advisories/34394

Source: cve@mitre.org

http://secunia.com/advisories/36562

Source: cve@mitre.org

http://secunia.com/advisories/37471

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1749

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-751-1

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0509

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/48872

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039

Source: cve@mitre.org

http://bugzilla.kernel.org/show_bug.cgi?id=12430

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/52202

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2009-1243.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34394

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36562

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37471

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1749

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-751-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0509

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/48872

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.