TNCVE-2009-4537 | Vulnetix

TNCVE-2009-4537 PUBLISHED

Record from tenable · Published January 12, 2010

drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote attackers to (1) cause a denial of service (temporary network outage) via a packet with a crafted size, in conjunction with certain packets containing A characters and certain packets containing E characters; or (2) cause a denial of service (system crash) via a packet with a crafted size, in conjunction with certain packets containing '\0' characters, related to the value of the status register and erroneous behavior associated with the RxMaxSize register. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1389.

Timeline

Jan 12, 2010 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln TNCVE-2009-4537
vulnetix vdb fixes TNCVE-2009-4537

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/TNCVE-2009-4537/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Tenable: CVE-2009-4537 advisory

Look up in the Resolve Platform →