CVE-2009-4537

Publication date 12 January 2010

Last updated 24 July 2024

Ubuntu priority

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	10.04 LTS lucid	Fixed 2.6.32-22.35
	9.10 karmic	Fixed 2.6.31-22.60
	9.04 jaunty	Fixed 2.6.28-19.61
	8.10 intrepid	Ignored
	8.04 LTS hardy	Fixed 2.6.24-28.70
	6.06 LTS dapper	Not in release
linux-source-2.6.15	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Fixed 2.6.15-55.84

Notes

kees

http://marc.info/?l=linux-netdev&m=126202972828626&w=2 http://marc.info/?l=linux-netdev&m=126269986618934&w=2

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Upstream: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=c0cd884af045338476b8e69a61fceb3f34ff22f1 Upstream: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=8812304cf1110ae16b0778680f6022216cf4716a

References

Related Ubuntu Security Notices (USN)