CVE-2009-4272
High · 7.5CVSS
7.5
EPSS
11.1%
Published
Jan 27, 2010
CISA due date
—
The record
A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chain is too long. NOTE: this is related to an issue in the Linux kernel before 2.6.31, when the kernel routing cache is disabled, involving an uninitialized pointer and a panic.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | kernel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debuginfo-common | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-doc | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-headers | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::hypervisor | rhev-hypervisor | 0 | 0:5.4-2.1.8.el5_4rhev2_1 |
| Red Hat:enterprise_linux:5::hypervisor | rhev-hypervisor-pxe | 0 | 0:5.4-2.1.8.el5_4rhev2_1 |
| Red Hat:enterprise_linux:5::server | kernel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debuginfo-common | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-doc | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-headers | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump-devel | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen-debuginfo | 0 | 0:2.6.18-164.11.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen-devel | 0 | 0:2.6.18-164.11.1.el5 |
Related vulnerabilities
- CVE-2016-5195 Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local… Also affects kernel
- CVE-2016-7117 Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux… Also affects kernel
- CVE-2016-1583 The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before… Also affects kernel
- CVE-2015-1805 The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel… Also affects kernel
- CVE-2014-8159 The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on… Also affects kernel
- CVE-2014-3917 kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled… Also affects kernel
- CVE-2013-2596 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel… Also affects kernel
- CVE-2012-0217 The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix… Also affects kernel