Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernelUpgrade kernel-headers | Dec 1, 2016 | Apr 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 27, 2009 |
| Suse | — | Upgrade kernel-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade ext4dev-kmp-ppc64Upgrade kernel-default-baseUpgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade ext4dev-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-vmiUpgrade ext4dev-kmp-paeUpgrade kernel-symsUpgrade kernel-vmi-baseUpgrade kernel-paeUpgrade kernel-default-manUpgrade ext4dev-kmp-vmiUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-pae-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-54-686Upgrade linux-image-2.6.15-54-hppa32-smpUpgrade linux-image-2.6.15-54-sparc64-smpUpgrade linux-image-2.6.24-24-powerpc-smpUpgrade linux-image-2.6.15-54-386Upgrade linux-image-2.6.24-24-powerpc64-smpUpgrade linux-image-2.6.15-54-amd64-k8Upgrade linux-image-2.6.15-54-server-bigironUpgrade linux-image-2.6.15-54-itaniumUpgrade linux-image-2.6.24-24-serverUpgrade linux-image-2.6.15-54-amd64-genericUpgrade linux-image-2.6.24-24-xenUpgrade linux-image-2.6.24-24-openvzUpgrade linux-image-2.6.24-24-lpiacompatUpgrade linux-image-2.6.15-54-mckinleyUpgrade linux-image-2.6.24-24-hppa64Upgrade linux-image-2.6.15-54-k7Upgrade linux-image-2.6.27-14-genericUpgrade linux-image-2.6.15-54-amd64-xeonUpgrade linux-image-2.6.15-54-serverUpgrade linux-image-2.6.15-54-hppa32Upgrade linux-image-2.6.28-13-lpiaUpgrade linux-image-2.6.15-54-powerpc64-smpUpgrade linux-image-2.6.24-24-rtUpgrade linux-image-2.6.27-14-virtualUpgrade linux-image-2.6.24-24-genericUpgrade linux-image-2.6.24-24-itaniumUpgrade linux-image-2.6.15-54-amd64-serverUpgrade linux-image-2.6.24-24-sparc64-smpUpgrade linux-image-2.6.15-54-mckinley-smpUpgrade linux-image-2.6.24-24-virtualUpgrade linux-image-2.6.28-13-imx51Upgrade linux-image-2.6.24-24-386Upgrade linux-image-2.6.28-13-serverUpgrade linux-image-2.6.28-13-ixp4xxUpgrade linux-image-2.6.28-13-genericUpgrade linux-image-2.6.24-24-powerpcUpgrade linux-image-2.6.15-54-hppa64Upgrade linux-image-2.6.24-24-lpiaUpgrade linux-image-2.6.28-13-iop32xUpgrade linux-image-2.6.15-54-itanium-smpUpgrade linux-image-2.6.24-24-sparc64Upgrade linux-image-2.6.15-54-sparc64Upgrade linux-image-2.6.24-24-hppa32Upgrade linux-image-2.6.27-14-serverUpgrade linux-image-2.6.15-54-hppa64-smpUpgrade linux-image-2.6.24-24-mckinleyUpgrade linux-image-2.6.15-54-powerpc-smpUpgrade linux-image-2.6.28-13-versatileUpgrade linux-image-2.6.15-54-powerpcUpgrade linux-image-2.6.28-13-virtual | Nov 8, 2024 | Apr 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Apr 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub