First published: Tue Aug 18 2009(Updated: )
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux kernel | =2.6.24.7 | |
Linux kernel | =2.6.25.15 | |
Linux Kernel | <=2.6.16.31 | |
Linux Kernel | =2.6 | |
Linux Kernel | =2.6.0 | |
Linux Kernel | =2.6.1 | |
Linux Kernel | =2.6.10 | |
Linux Kernel | =2.6.11 | |
Linux Kernel | =2.6.11.1 | |
Linux Kernel | =2.6.11.2 | |
Linux Kernel | =2.6.11.3 | |
Linux Kernel | =2.6.11.4 | |
Linux Kernel | =2.6.11.5 | |
Linux Kernel | =2.6.11.6 | |
Linux Kernel | =2.6.11.7 | |
Linux Kernel | =2.6.11.8 | |
Linux Kernel | =2.6.11.9 | |
Linux Kernel | =2.6.11.10 | |
Linux Kernel | =2.6.11.11 | |
Linux Kernel | =2.6.11.12 | |
Linux Kernel | =2.6.12 | |
Linux Kernel | =2.6.12.1 | |
Linux Kernel | =2.6.12.2 | |
Linux Kernel | =2.6.12.3 | |
Linux Kernel | =2.6.12.4 | |
Linux Kernel | =2.6.12.5 | |
Linux Kernel | =2.6.12.6 | |
Linux Kernel | =2.6.13 | |
Linux Kernel | =2.6.13.1 | |
Linux Kernel | =2.6.13.2 | |
Linux Kernel | =2.6.13.3 | |
Linux Kernel | =2.6.13.4 | |
Linux Kernel | =2.6.13.5 | |
Linux Kernel | =2.6.14 | |
Linux Kernel | =2.6.14.1 | |
Linux Kernel | =2.6.14.2 | |
Linux Kernel | =2.6.14.3 | |
Linux Kernel | =2.6.14.4 | |
Linux Kernel | =2.6.14.5 | |
Linux Kernel | =2.6.14.6 | |
Linux Kernel | =2.6.14.7 | |
Linux Kernel | =2.6.15 | |
Linux Kernel | =2.6.15.1 | |
Linux Kernel | =2.6.15.2 | |
Linux Kernel | =2.6.15.3 | |
Linux Kernel | =2.6.15.4 | |
Linux Kernel | =2.6.15.5 | |
Linux Kernel | =2.6.15.6 | |
Linux Kernel | =2.6.15.7 | |
Linux Kernel | =2.6.16 | |
Linux Kernel | =2.6.16.1 | |
Linux Kernel | =2.6.16.2 | |
Linux Kernel | =2.6.16.3 | |
Linux Kernel | =2.6.16.10 | |
Linux Kernel | =2.6.16.11 | |
Linux Kernel | =2.6.16.12 | |
Linux Kernel | =2.6.16.13 | |
Linux Kernel | =2.6.16.14 | |
Linux Kernel | =2.6.16.15 | |
Linux Kernel | =2.6.16.16 | |
Linux Kernel | =2.6.16.17 | |
Linux Kernel | =2.6.16.18 | |
Linux Kernel | =2.6.16.19 | |
Linux Kernel | =2.6.16.20 | |
Linux Kernel | =2.6.16.21 | |
Linux Kernel | =2.6.16.22 | |
Linux Kernel | =2.6.16.23 | |
Linux Kernel | =2.6.16.24 | |
Linux Kernel | =2.6.16.25 | |
Linux Kernel | =2.6.16.26 | |
Linux Kernel | =2.6.16.27 | |
Linux Kernel | =2.6.16.28 | |
Linux Kernel | =2.6.16.29 | |
Linux Kernel | =2.6.16.30 | |
Linux Kernel | =2.6.16.31 | |
Linux Kernel | =2.6.16.31--rc1 | |
Linux Kernel | =2.6.16.31--rc2 | |
Linux Kernel | =2.6.16.31--rc3 | |
Linux Kernel | =2.6.16.31--rc4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-2844 has a severity rating that indicates it can cause a denial of service (DoS) leading to system crashes.
To address CVE-2009-2844, you should upgrade to Linux kernel versions 2.6.31-rc6 or later.
CVE-2009-2844 affects various versions of the Linux kernel prior to 2.6.31-rc6.
CVE-2009-2844 is classified as a denial of service vulnerability.
Yes, CVE-2009-2844 can be exploited by remote attackers through crafted beacon frames.