CVE-2009-1265: Integer Overflow
Published Apr 8, 2009
·Updated
Integer overflow in rosesendmsg (sys/net/afrose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
Affected Software
114 affected components
Linux Linux kernel=2.6.27.29
Linux Linux kernel=2.6.27.12
Linux Linux kernel=2.6.27.3
Linux Linux kernel=2.6.29.3
Linux Linux kernel=2.6.27.1
Linux Linux kernel=2.6.27.52
Linux Linux kernel=2.6.27.50
Linux Linux kernel=2.6.27.30
Linux Linux kernel=2.6.24.7
Linux Linux kernel=2.6.27.45
Linux Linux kernel=2.6.27.34
Linux Linux kernel=2.6.27.18
Linux Linux kernel=2.6.26.5
Linux Linux kernel=2.6.25.20
Linux Linux kernel=2.6.27.37
Linux Linux kernel=2.6.27.21
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.27.27
Linux Linux kernel=2.6.25.18
Linux Linux kernel=2.6.29
Linux Linux kernel=2.6.27.10
Linux Linux kernel=2.6.26.6
Linux Linux kernel=2.6.27.17
Linux Linux kernel=2.6.28.4
Linux Linux kernel=2.6.27.16
Linux Linux kernel=2.6.26
Linux Linux kernel=2.6.27.20
Linux Linux kernel=2.6.26.3
Linux Linux kernel=2.6.27.49
Linux Linux kernel=2.6.28.2
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.27.4
Linux Linux kernel=2.6.27
Linux Linux kernel=2.6.25.13
Linux Linux kernel=2.6.28.5
Linux Linux kernel=2.6.27.33
Linux Linux kernel=2.6.27.13
Linux Linux kernel=2.6.27.40
Linux Linux kernel=2.6.27.44
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.27.36
Linux Linux kernel=2.6.26.2
Linux Linux kernel=2.6.27.15
Linux Linux kernel=2.6.25.15
Linux Linux kernel=2.6.29.4
Linux Linux kernel=2.6.27.26
Linux Linux kernel=2.6.27.53
Linux Linux kernel=2.6.27.8
Linux Linux kernel=2.6.26.1
Linux Linux kernel=2.6.25.19
Linux Linux kernel=2.6.27.9
Linux Linux kernel=2.6.27.54
Linux Linux kernel=2.6.27.25
Linux Linux kernel=2.6.27.39
Linux Linux kernel=2.6.27.62
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.6.28.8
Linux Linux kernel=2.6.27.56
Linux Linux kernel=2.6.27.41
Linux Linux kernel=2.6.29.1
Linux Linux kernel=2.6.24.4
Linux Linux kernel=2.6.27.19
Linux Linux kernel=2.6.27.43
Linux Linux kernel=2.6.25.16
Linux Linux kernel=2.6.25.17
Linux Linux kernel=2.6.28.3
Linux Linux kernel=2.6.27.28
Linux Linux kernel=2.6.24.5
Linux Linux kernel=2.6.27.46
Linux Linux kernel=2.6.27.35
Linux Linux kernel=2.6.27.22
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6.27.51
Linux Linux kernel=2.6.27.55
Linux Linux kernel=2.6.29.6
Linux Linux kernel=2.6.27.5
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.27.61
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.28.9
Linux Linux kernel=2.6.27.7
Linux Linux kernel=2.6.27.58
Linux Linux kernel=2.6.28.6
Linux Linux kernel=2.6.27.47
Linux Linux kernel=2.6.28.7
Linux Linux kernel=2.6.27.57
Linux Linux kernel=2.6.24.6
Linux Linux kernel=2.6.27.32
Linux Linux kernel=2.6.27.48
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.27.31
Linux Linux kernel=2.6.29.2
Linux Linux kernel=2.6.27.38
Linux Linux kernel=2.6.27.24
Linux Linux kernel=2.6.27.2
Linux Linux kernel=2.6.27.59
Linux Linux kernel=2.6.27.11
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.6.25.14
Linux Linux kernel=2.6.28.1
Linux Linux kernel=2.6.26.4
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.27.6
Linux Linux kernel=2.6.26.7
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.28.10
Linux Linux kernel=2.6.27.42
Linux Linux kernel=2.6.27.23
Linux Linux kernel=2.6.27.14
Linux Linux kernel=2.6.28
Linux Linux kernel=2.6.29.5
Linux Linux kernel=2.6.27.60
Event History
Apr 8, 2009
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1265?
The severity of CVE-2009-1265 is rated as moderate, as it may allow remote attackers to access sensitive data.
2
How do I fix CVE-2009-1265?
To fix CVE-2009-1265, update the Linux kernel to version 2.6.30-rc1 or later.
3
What versions of the Linux kernel are affected by CVE-2009-1265?
CVE-2009-1265 affects Linux kernel versions from 2.6.24.4 up to 2.6.29.6.
4
What type of vulnerability is CVE-2009-1265?
CVE-2009-1265 is an integer overflow vulnerability that can expose sensitive information.
5
Can CVE-2009-1265 be exploited remotely?
Yes, CVE-2009-1265 can be exploited remotely by attackers through crafted messages.