CVE-2009-1385: Integer Overflow
Published Apr 25, 2007
·Updated
Integer underflow in the e1000cleanrxirq function in drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000) before 7.5.5 allows remote attackers to cause a denial of service (panic) via a crafted frame size.
Affected Software
150 affected componentsFixes available
redhat/kernel-rt<0:2.6.24.7-126.el5
0:2.6.24.7-126.el5
redhat/kernel<0:2.6.18-128.4.1.el5
0:2.6.18-128.4.1.el5
redhat/kernel<0:2.6.18-92.1.35.el5
0:2.6.18-92.1.35.el5
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.29-rc8-kk
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.22.15
Linux Linux kernel=2.6.29.3
Intel e1000=5.5.4
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.23.13
Linux Linux kernel=2.6.24.2
Linux Linux kernel=2.4.36.6
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.26.5
Linux Linux kernel<=2.6.28
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.22.21
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.30-rc2
Linux Linux kernel=2.6.25.5
Intel e1000=5.4.11
Linux Linux kernel=2.6.23.8
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.22.12
Intel e1000=7.3.15
Linux Linux kernel=2.6.29
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.6.30-rc3
Intel e1000=7.0.41
Linux Linux kernel=2.6.21.6
Linux Linux kernel=2.4.36.2
Linux Linux kernel=2.6.22.1
Linux Linux kernel=2.6.23.16
Linux Linux kernel=2.6.24.1
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.22
Linux Linux kernel=2.6.26
Intel e1000=7.4.27
Linux Linux kernel=2.6.26.3
Linux Linux kernel=2.6.20.16
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.27
Linux Linux kernel=2.6.19.4
Linux Linux kernel=2.6.25.13
Intel e1000=5.6.10
Linux Linux kernel=2.6.20.21
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.4.36.1
Intel e1000=6.3.9
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.24
Linux Linux kernel=2.6.26.2
Linux Linux kernel=2.6.20.17
Intel e1000=5.6.10.1
Linux Linux kernel=2.6.21.5
Linux Linux kernel=2.6.24_rc4
Linux Linux kernel=2.6.23.15
Linux Linux kernel=2.6.23.10
Linux Linux kernel=2.4.36.4
Linux Linux kernel=2.6.26.1
Linux Linux kernel=2.6.20.20
Intel e1000=7.0.33
Linux Linux kernel=2.6.22.18
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.4.36.3
Linux Linux kernel=2.6.22.20
Linux Linux kernel=2.6.20.18
Linux Linux kernel=2.6.23.9
Linux Linux kernel=2.6.29-rc2
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.1
Intel e1000=7.3.20
Linux Linux kernel=2.6.24.4
Intel e1000=5.2.30.1
Linux Linux kernel=2.6.25.16
Linux Linux kernel=2.6.22.9
Intel e1000<=7.4.35
Linux Linux kernel=2.6.25.17
Intel e1000=5.7.6
Linux Linux kernel=2.6.22.13
Linux Linux kernel=2.6.19.7
Intel e1000=5.3.19
Linux Linux kernel=2.6.24.5
Linux Linux kernel=2.6.24_rc1
Linux Linux kernel=2.6.20.19
Linux Linux kernel=2.6.22.17
Intel e1000=7.2.9
Linux Linux kernel<=2.6.30
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6.22.11
Linux Kernel=2.6.24.7
Linux Linux kernel=2.6.23
Intel e1000=6.0.54
Intel e1000=6.1.16
Linux Linux kernel=2.6.22.10
Intel e1000=6.2.15
Linux Linux kernel=2.6.23.17
Linux Linux kernel=2.6.29-rc2_git7
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.21.7
Linux Linux kernel=2.6.23_rc1
Linux Linux kernel=2.6.22.22
Linux Linux kernel=2.6.29-rc1
Linux Linux kernel=2.6.29.rc1
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.24.6
Linux Linux kernel=2.6.22_rc7
Linux Linux kernel=2.4.36
Linux Linux kernel=2.6.23.12
Linux Linux kernel=2.6.24_rc5
Linux Linux kernel=2.6.19.6
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.18-rc6
Linux Kernel=2.6.25.15
Linux Linux kernel=2.6.22.8
Intel e1000=5.2.52
Linux Linux kernel=2.6.19.5
Linux Linux kernel=2.6.18
Linux Linux kernel=2.4.36.5
Intel e1000=5.2.22
Intel e1000=7.1.9
Linux Linux kernel=2.6.22.2
Linux Linux kernel=2.6.29.rc2
Linux Linux kernel=2.2.27
Linux Linux kernel=2.6.22.19
Linux Linux kernel=2.6.24.3
Linux Linux kernel=2.6.22_rc1
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.6.29.rc2-git1
Linux Linux kernel=2.6.25.14
Linux Linux kernel=2.6.30-rc1
Linux Linux kernel=2.6.26.4
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.29-git1
Linux Linux kernel=2.6.25.6
Intel e1000=7.2.7
Intel e1000=6.0.60
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.23.11
Linux Linux kernel=2.6.22.14
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6
Remediation
Patch Available
Event History
Apr 25, 2007
CVE Published
via Red Hat·12:00 AM
May 28, 2009
Data Sourced
via Red Hat·05:43 AM
DescriptionSeverityAffected Software
Jun 4, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2009-1385?
CVE-2009-1385 has a severity rating that allows remote attackers to cause a denial of service, leading to system panic.
2
How do I fix CVE-2009-1385?
To fix CVE-2009-1385, you should update to the appropriate kernel version 2.6.30-rc8 or higher, or the specified remedial versions of the e1000 driver.
3
What systems are affected by CVE-2009-1385?
CVE-2009-1385 affects Linux kernel versions prior to 2.6.30-rc8 and specific versions of the Intel e1000 driver.
4
Can CVE-2009-1385 be exploited remotely?
Yes, CVE-2009-1385 can be exploited remotely by attackers leading to denial of service.
5
What components are involved in CVE-2009-1385?
CVE-2009-1385 involves the e1000_clean_rx_irq function in the e1000 driver and the Linux kernel.