VDB
CVE-2009-4021
CVE-2009-4021
PUBLISHED
Reported by redhat · Published November 25, 2009
The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
| linux | linux_kernel |
Timeline
- Nov 25, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
References
- x_refsource_CONFIRM
- x_refsource_CONFIRM
- SUSE-SA:2009:061 vendor-advisoryx_refsource_SUSE
- SUSE-SA:2010:001 vendor-advisoryx_refsource_SUSE
- 37069 vdb-entryx_refsource_BID
- [oss-security] 20091119 CVE request: kernel: fuse: prevent fuse_put_request on invalid pointer mailing-listx_refsource_MLIST
- kernel-fusedirectio-dos(54358) vdb-entryx_refsource_XF
- x_refsource_CONFIRM
- SUSE-SA:2010:012 vendor-advisoryx_refsource_SUSE
- 37909 third-party-advisoryx_refsource_SECUNIA
- x_refsource_CONFIRM
- SUSE-SA:2009:064 vendor-advisoryx_refsource_SUSE
- oval:org.mitre.oval:def:6955 vdb-entrysignaturex_refsource_OVAL
- RHSA-2010:0095 vendor-advisoryx_refsource_REDHAT
- oval:org.mitre.oval:def:10516 vdb-entrysignaturex_refsource_OVAL
- RHSA-2010:0046 vendor-advisoryx_refsource_REDHAT
- DSA-2005 vendor-advisoryx_refsource_DEBIAN
- [oss-security] 20091124 Re: CVE request: kernel: fuse: prevent fuse_put_request on invalid pointer mailing-listx_refsource_MLIST
- RHSA-2010:0041 vendor-advisoryx_refsource_REDHAT
- 38017 third-party-advisoryx_refsource_SECUNIA