CVE-2009-1439

kernel: cifs: memory overwrite when saving nativeFileSystem field during mount

Published Apr 27, 2009 CVSS 2.0 · 7.8 High EPSS 4.3% KEV · Not listed
Description
Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1787-1 New Linux 2.6.24 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1794-1 New Linux 2.6.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1800-1 New Linux 2.6.26 packages fix several vulnerabilities
EUVD EUVD EUVD-2009-1437 Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
Ubuntu USN Ubuntu USN USN-793-1 Linux kernel vulnerabilities
References
Link Providers
http://blog.fefe.de/?ts=b72905a8 cve-icon cve-icon
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b363b3304bcf68c4541683b2eff70b29f0446a5b cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00002.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html cve-icon cve-icon
http://lists.samba.org/archive/linux-cifs-client/2009-April/004322.html cve-icon cve-icon
http://secunia.com/advisories/34981 cve-icon cve-icon
http://secunia.com/advisories/35011 cve-icon cve-icon
http://secunia.com/advisories/35120 cve-icon cve-icon
http://secunia.com/advisories/35121 cve-icon cve-icon
http://secunia.com/advisories/35185 cve-icon cve-icon
http://secunia.com/advisories/35217 cve-icon cve-icon
http://secunia.com/advisories/35226 cve-icon cve-icon
http://secunia.com/advisories/35343 cve-icon cve-icon
http://secunia.com/advisories/35387 cve-icon cve-icon
http://secunia.com/advisories/35390 cve-icon cve-icon
http://secunia.com/advisories/35394 cve-icon cve-icon
http://secunia.com/advisories/35656 cve-icon cve-icon
http://secunia.com/advisories/37471 cve-icon cve-icon
http://wiki.rpath.com/Advisories:rPSA-2009-0084 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1787 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1794 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1800 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2009/04/04/1 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2009/04/07/3 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2009/04/07/7 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2009-1081.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/503610/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/507985/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/34453 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-793-1 cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2009-0016.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/3316 cve-icon cve-icon
http://xorl.wordpress.com/2009/04/07/linux-kernel-tree-connect-cifs-remote-buffer-overflow/ cve-icon cve-icon
https://bugzilla.novell.com/show_bug.cgi?id=492282 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=494275 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2009-1439 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10321 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8265 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2009-1439 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01271.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 5:13 AM
Reserved
Apr 27, 2009, 12:00 AM
Status
Modified
Published
Apr 27, 2009, 6:00 PM
Modified
Jun 16, 2026, 11:07 PM
Severity
Important
Public date
Mar 26, 2009, 12:00 AM