CVE-2009-2844
published 2009-08-18CVE-2009-2844: cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service…
PriorityP431high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
3.36%
87.4th percentile
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
Affected
75 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | kernel | — | — |
| linux | kernel | — | — |
| linux | linux_kernel | <= 2.6.16.31 | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
CVE-2009-2844: Vulnerabilities in the kernel
vendor_redhat·CVSS 7.8
CVE-2009-2844 [HIGH] CVE-2009-2844: Vulnerabilities in the kernel
CVE-2009-2844: Vulnerabilities in the kernel
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
Statement: Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG.
Please note this issue only affected Linux kernel versions after v2.6.30-rc1
GHSA
GHSA-h6cm-xhvp-x8jm: cfg80211 in net/wireless/scan
ghsa_unreviewed·2022-05-02
CVE-2009-2844 [HIGH] GHSA-h6cm-xhvp-x8jm: cfg80211 in net/wireless/scan
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520ehttp://jon.oberheide.org/files/cfg80211-remote-dos.chttp://secunia.com/advisories/36278http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5http://www.openwall.com/lists/oss-security/2009/08/17/1http://www.openwall.com/lists/oss-security/2009/08/17/2http://www.securityfocus.com/bid/36052http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=cd3468bad96c00b5a512f551674f36776129520ehttp://jon.oberheide.org/files/cfg80211-remote-dos.chttp://secunia.com/advisories/36278http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.5http://www.openwall.com/lists/oss-security/2009/08/17/1http://www.openwall.com/lists/oss-security/2009/08/17/2http://www.securityfocus.com/bid/36052
2009-08-18
Published