CVE-2009-1265
N/A
Published: April 8, 2009 at 01:00 AM UTC
Updated: June 16, 2026 at 11:06 PM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.6.24.42.6.24.52.6.24.62.6.24.72.6.252.6.25.12.6.25.102.6.25.112.6.25.122.6.25.132.6.25.142.6.25.152.6.25.162.6.25.172.6.25.182.6.25.192.6.25.22.6.25.202.6.25.32.6.25.42.6.25.52.6.25.62.6.25.72.6.25.82.6.25.92.6.262.6.26.12.6.26.22.6.26.32.6.26.42.6.26.52.6.26.62.6.26.72.6.272.6.27.12.6.27.102.6.27.112.6.27.122.6.27.132.6.27.142.6.27.152.6.27.162.6.27.172.6.27.182.6.27.192.6.27.22.6.27.202.6.27.212.6.27.222.6.27.232.6.27.242.6.27.252.6.27.262.6.27.272.6.27.282.6.27.292.6.27.32.6.27.302.6.27.312.6.27.322.6.27.332.6.27.342.6.27.352.6.27.362.6.27.372.6.27.382.6.27.392.6.27.42.6.27.402.6.27.412.6.27.422.6.27.432.6.27.442.6.27.452.6.27.462.6.27.472.6.27.482.6.27.492.6.27.52.6.27.502.6.27.512.6.27.522.6.27.532.6.27.542.6.27.552.6.27.562.6.27.572.6.27.582.6.27.592.6.27.62.6.27.602.6.27.612.6.27.622.6.27.72.6.27.82.6.27.92.6.282.6.28.12.6.28.102.6.28.22.6.28.32.6.28.42.6.28.52.6.28.62.6.28.72.6.28.82.6.28.92.6.292.6.29.12.6.29.22.6.29.32.6.29.42.6.29.52.6.29.6
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html
- http://secunia.com/advisories/34981
References (25)
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.htmlQuick Info
StatusMODIFIED
CWE
CWE-189
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card