CVE-2009-2407

Published: Jul 31, 2009Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to a large encrypted key size in a Tag 3 packet.

Affected (309)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

309 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.30.3
Linux Linux Kernel	Version 2.6.0
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.11.10
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.12
Linux Linux Kernel	Version 2.6.11.1
Linux Linux Kernel	Version 2.6.11.2
Linux Linux Kernel	Version 2.6.11.3
Linux Linux Kernel	Version 2.6.11.4
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11.9
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.12.1
Linux Linux Kernel	Version 2.6.12.2
Linux Linux Kernel	Version 2.6.12.3
Linux Linux Kernel	Version 2.6.12.4
Linux Linux Kernel	Version 2.6.12.5
Linux Linux Kernel	Version 2.6.12.6
Linux Linux Kernel	Version 2.6.12
Linux Linux Kernel	Version 2.6.13.1
Linux Linux Kernel	Version 2.6.13.2
Linux Linux Kernel	Version 2.6.13.3
Linux Linux Kernel	Version 2.6.13.4
Linux Linux Kernel	Version 2.6.13.5
Linux Linux Kernel	Version 2.6.13
Linux Linux Kernel	Version 2.6.14.1
Linux Linux Kernel	Version 2.6.14.2
Linux Linux Kernel	Version 2.6.14.3
Linux Linux Kernel	Version 2.6.14.4
Linux Linux Kernel	Version 2.6.14.5
Linux Linux Kernel	Version 2.6.14.6
Linux Linux Kernel	Version 2.6.14.7
Linux Linux Kernel	Version 2.6.14
Linux Linux Kernel	Version 2.6.15.1
Linux Linux Kernel	Version 2.6.15.2
Linux Linux Kernel	Version 2.6.15.3
Linux Linux Kernel	Version 2.6.15.4
Linux Linux Kernel	Version 2.6.15.5
Linux Linux Kernel	Version 2.6.15.6
Linux Linux Kernel	Version 2.6.15.7
Linux Linux Kernel	Version 2.6.15
Linux Linux Kernel	Version 2.6.16.10
Linux Linux Kernel	Version 2.6.16.11
Linux Linux Kernel	Version 2.6.16.12
Linux Linux Kernel	Version 2.6.16.13
Linux Linux Kernel	Version 2.6.16.14
Linux Linux Kernel	Version 2.6.16.15
Linux Linux Kernel	Version 2.6.16.16
Linux Linux Kernel	Version 2.6.16.17
Linux Linux Kernel	Version 2.6.16.18
Linux Linux Kernel	Version 2.6.16.19
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.20
Linux Linux Kernel	Version 2.6.16.21
Linux Linux Kernel	Version 2.6.16.22
Linux Linux Kernel	Version 2.6.16.23
Linux Linux Kernel	Version 2.6.16.24
Linux Linux Kernel	Version 2.6.16.25
Linux Linux Kernel	Version 2.6.16.26
Linux Linux Kernel	Version 2.6.16.27
Linux Linux Kernel	Version 2.6.16.28
Linux Linux Kernel	Version 2.6.16.29
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.30
Linux Linux Kernel	Version 2.6.16.31
Linux Linux Kernel	Version 2.6.16.32
Linux Linux Kernel	Version 2.6.16.33
Linux Linux Kernel	Version 2.6.16.34
Linux Linux Kernel	Version 2.6.16.35
Linux Linux Kernel	Version 2.6.16.36
Linux Linux Kernel	Version 2.6.16.37
Linux Linux Kernel	Version 2.6.16.38
Linux Linux Kernel	Version 2.6.16.39
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.40
Linux Linux Kernel	Version 2.6.16.41
Linux Linux Kernel	Version 2.6.16.42
Linux Linux Kernel	Version 2.6.16.43
Linux Linux Kernel	Version 2.6.16.44
Linux Linux Kernel	Version 2.6.16.45
Linux Linux Kernel	Version 2.6.16.46
Linux Linux Kernel	Version 2.6.16.47
Linux Linux Kernel	Version 2.6.16.48
Linux Linux Kernel	Version 2.6.16.49
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16.50
Linux Linux Kernel	Version 2.6.16.51
Linux Linux Kernel	Version 2.6.16.52
Linux Linux Kernel	Version 2.6.16.53
Linux Linux Kernel	Version 2.6.16.54
Linux Linux Kernel	Version 2.6.16.55
Linux Linux Kernel	Version 2.6.16.56
Linux Linux Kernel	Version 2.6.16.57
Linux Linux Kernel	Version 2.6.16.58
Linux Linux Kernel	Version 2.6.16.59
Linux Linux Kernel	Version 2.6.16.5
Linux Linux Kernel	Version 2.6.16.60
Linux Linux Kernel	Version 2.6.16.61
Linux Linux Kernel	Version 2.6.16.62
Linux Linux Kernel	Version 2.6.16.6
Linux Linux Kernel	Version 2.6.16.7
Linux Linux Kernel	Version 2.6.16.8
Linux Linux Kernel	Version 2.6.16.9
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.17.10
Linux Linux Kernel	Version 2.6.17.11
Linux Linux Kernel	Version 2.6.17.12
Linux Linux Kernel	Version 2.6.17.13
Linux Linux Kernel	Version 2.6.17.14
Linux Linux Kernel	Version 2.6.17.1
Linux Linux Kernel	Version 2.6.17.2
Linux Linux Kernel	Version 2.6.17.3
Linux Linux Kernel	Version 2.6.17.4
Linux Linux Kernel	Version 2.6.17.5
Linux Linux Kernel	Version 2.6.17.6
Linux Linux Kernel	Version 2.6.17.7
Linux Linux Kernel	Version 2.6.17.8
Linux Linux Kernel	Version 2.6.17.9
Linux Linux Kernel	Version 2.6.17
Linux Linux Kernel	Version 2.6.18.1
Linux Linux Kernel	Version 2.6.18.2
Linux Linux Kernel	Version 2.6.18.3
Linux Linux Kernel	Version 2.6.18.4
Linux Linux Kernel	Version 2.6.18.5
Linux Linux Kernel	Version 2.6.18.6
Linux Linux Kernel	Version 2.6.18.7
Linux Linux Kernel	Version 2.6.18.8
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.19.1
Linux Linux Kernel	Version 2.6.19.2
Linux Linux Kernel	Version 2.6.19.3
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.19
Linux Linux Kernel	Version 2.6.1
Linux Linux Kernel	Version 2.6.20.10
Linux Linux Kernel	Version 2.6.20.11
Linux Linux Kernel	Version 2.6.20.12
Linux Linux Kernel	Version 2.6.20.13
Linux Linux Kernel	Version 2.6.20.14
Linux Linux Kernel	Version 2.6.20.15
Linux Linux Kernel	Version 2.6.20.16
Linux Linux Kernel	Version 2.6.20.17
Linux Linux Kernel	Version 2.6.20.18
Linux Linux Kernel	Version 2.6.20.19
Linux Linux Kernel	Version 2.6.20.1
Linux Linux Kernel	Version 2.6.20.20
Linux Linux Kernel	Version 2.6.20.21
Linux Linux Kernel	Version 2.6.20.2
Linux Linux Kernel	Version 2.6.20.3
Linux Linux Kernel	Version 2.6.20.4
Linux Linux Kernel	Version 2.6.20.5
Linux Linux Kernel	Version 2.6.20.6
Linux Linux Kernel	Version 2.6.20.7
Linux Linux Kernel	Version 2.6.20.8
Linux Linux Kernel	Version 2.6.20.9
Linux Linux Kernel	Version 2.6.20
Linux Linux Kernel	Version 2.6.21.1
Linux Linux Kernel	Version 2.6.21.2
Linux Linux Kernel	Version 2.6.21.3
Linux Linux Kernel	Version 2.6.21.4
Linux Linux Kernel	Version 2.6.21.5
Linux Linux Kernel	Version 2.6.21.6
Linux Linux Kernel	Version 2.6.21.7
Linux Linux Kernel	Version 2.6.21
Linux Linux Kernel	Version 2.6.22.10
Linux Linux Kernel	Version 2.6.22.11
Linux Linux Kernel	Version 2.6.22.12
Linux Linux Kernel	Version 2.6.22.13
Linux Linux Kernel	Version 2.6.22.14
Linux Linux Kernel	Version 2.6.22.15
Linux Linux Kernel	Version 2.6.22.16
Linux Linux Kernel	Version 2.6.22.17
Linux Linux Kernel	Version 2.6.22.18
Linux Linux Kernel	Version 2.6.22.19
Linux Linux Kernel	Version 2.6.22.1
Linux Linux Kernel	Version 2.6.22.2
Linux Linux Kernel	Version 2.6.22.3
Linux Linux Kernel	Version 2.6.22.4
Linux Linux Kernel	Version 2.6.22.5
Linux Linux Kernel	Version 2.6.22.6
Linux Linux Kernel	Version 2.6.22.7
Linux Linux Kernel	Version 2.6.22.8
Linux Linux Kernel	Version 2.6.22.9
Linux Linux Kernel	Version 2.6.22
Linux Linux Kernel	Version 2.6.23.10
Linux Linux Kernel	Version 2.6.23.11
Linux Linux Kernel	Version 2.6.23.12
Linux Linux Kernel	Version 2.6.23.13
Linux Linux Kernel	Version 2.6.23.14
Linux Linux Kernel	Version 2.6.23.15
Linux Linux Kernel	Version 2.6.23.16
Linux Linux Kernel	Version 2.6.23.17
Linux Linux Kernel	Version 2.6.23.1
Linux Linux Kernel	Version 2.6.23.2
Linux Linux Kernel	Version 2.6.23.3
Linux Linux Kernel	Version 2.6.23.4
Linux Linux Kernel	Version 2.6.23.5
Linux Linux Kernel	Version 2.6.23.6
Linux Linux Kernel	Version 2.6.23.7
Linux Linux Kernel	Version 2.6.23.8
Linux Linux Kernel	Version 2.6.23.9
Linux Linux Kernel	Version 2.6.23
Linux Linux Kernel	Version 2.6.24.1
Linux Linux Kernel	Version 2.6.24.2
Linux Linux Kernel	Version 2.6.24.3
Linux Linux Kernel	Version 2.6.24.4
Linux Linux Kernel	Version 2.6.24.5
Linux Linux Kernel	Version 2.6.24.6
Linux Linux Kernel	Version 2.6.24.7
Linux Linux Kernel	Version 2.6.24
Linux Linux Kernel	Version 2.6.25.10
Linux Linux Kernel	Version 2.6.25.11
Linux Linux Kernel	Version 2.6.25.12
Linux Linux Kernel	Version 2.6.25.13
Linux Linux Kernel	Version 2.6.25.14
Linux Linux Kernel	Version 2.6.25.15
Linux Linux Kernel	Version 2.6.25.16
Linux Linux Kernel	Version 2.6.25.17
Linux Linux Kernel	Version 2.6.25.18
Linux Linux Kernel	Version 2.6.25.19
Linux Linux Kernel	Version 2.6.25.1
Linux Linux Kernel	Version 2.6.25.20
Linux Linux Kernel	Version 2.6.25.2
Linux Linux Kernel	Version 2.6.25.3
Linux Linux Kernel	Version 2.6.25.4
Linux Linux Kernel	Version 2.6.25.5
Linux Linux Kernel	Version 2.6.25.6
Linux Linux Kernel	Version 2.6.25.7
Linux Linux Kernel	Version 2.6.25.8
Linux Linux Kernel	Version 2.6.25.9
Linux Linux Kernel	Version 2.6.25
Linux Linux Kernel	Version 2.6.26.1
Linux Linux Kernel	Version 2.6.26.2
Linux Linux Kernel	Version 2.6.26.3
Linux Linux Kernel	Version 2.6.26.4
Linux Linux Kernel	Version 2.6.26.5
Linux Linux Kernel	Version 2.6.26.6
Linux Linux Kernel	Version 2.6.26.7
Linux Linux Kernel	Version 2.6.26.8
Linux Linux Kernel	Version 2.6.26
Linux Linux Kernel	Version 2.6.27.10
Linux Linux Kernel	Version 2.6.27.11
Linux Linux Kernel	Version 2.6.27.12
Linux Linux Kernel	Version 2.6.27.13
Linux Linux Kernel	Version 2.6.27.14
Linux Linux Kernel	Version 2.6.27.15
Linux Linux Kernel	Version 2.6.27.16
Linux Linux Kernel	Version 2.6.27.17
Linux Linux Kernel	Version 2.6.27.18
Linux Linux Kernel	Version 2.6.27.19
Linux Linux Kernel	Version 2.6.27.1
Linux Linux Kernel	Version 2.6.27.20
Linux Linux Kernel	Version 2.6.27.21
Linux Linux Kernel	Version 2.6.27.22
Linux Linux Kernel	Version 2.6.27.23
Linux Linux Kernel	Version 2.6.27.24
Linux Linux Kernel	Version 2.6.27.25
Linux Linux Kernel	Version 2.6.27.26
Linux Linux Kernel	Version 2.6.27.27
Linux Linux Kernel	Version 2.6.27.28
Linux Linux Kernel	Version 2.6.27.29
Linux Linux Kernel	Version 2.6.27.2
Linux Linux Kernel	Version 2.6.27.30
Linux Linux Kernel	Version 2.6.27.31
Linux Linux Kernel	Version 2.6.27.3
Linux Linux Kernel	Version 2.6.27.4
Linux Linux Kernel	Version 2.6.27.5
Linux Linux Kernel	Version 2.6.27.6
Linux Linux Kernel	Version 2.6.27.7
Linux Linux Kernel	Version 2.6.27.8
Linux Linux Kernel	Version 2.6.27.9
Linux Linux Kernel	Version 2.6.27
Linux Linux Kernel	Version 2.6.28.10
Linux Linux Kernel	Version 2.6.28.1
Linux Linux Kernel	Version 2.6.28.2
Linux Linux Kernel	Version 2.6.28.3
Linux Linux Kernel	Version 2.6.28.4
Linux Linux Kernel	Version 2.6.28.5
Linux Linux Kernel	Version 2.6.28.6
Linux Linux Kernel	Version 2.6.28.7
Linux Linux Kernel	Version 2.6.28.8
Linux Linux Kernel	Version 2.6.28.9
Linux Linux Kernel	Version 2.6.28
Linux Linux Kernel	Version 2.6.29.1
Linux Linux Kernel	Version 2.6.29.2
Linux Linux Kernel	Version 2.6.29.3
Linux Linux Kernel	Version 2.6.29.4
Linux Linux Kernel	Version 2.6.29.5
Linux Linux Kernel	Version 2.6.29.6
Linux Linux Kernel	Version 2.6.29
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.30.1
Linux Linux Kernel	Version 2.6.30.2
Linux Linux Kernel	Version 2.6.30
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.8.1
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (50)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html

Source: secalert@redhat.com

http://risesecurity.org/advisories/RISE-2009003.txt

Source: secalert@redhat.com

Exploit

http://secunia.com/advisories/35985

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/36045

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/36051

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/36054

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36116

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/36131

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/37471

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1844

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2009/dsa-1845

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.4

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-1193.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/505337/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/35850

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-807-1

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/2041

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11255

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8057

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00166.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00223.html

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f151cd2c54ddc7714e2f740681350476cda03a28