BID:36052

Linux Kernel 'cmp_ies()' Remote Null Pointer Dereference Vulnerability

Info

Linux Kernel 'cmp_ies()' Remote Null Pointer Dereference Vulnerability

Bugtraq ID:	36052
Class:	Design Error
CVE:	CVE-2009-2844
Remote:	Yes
Local:	No
Published:	Aug 13 2009 12:00AM
Updated:	Aug 26 2009 10:02PM
Credit:	Johannes Berg
Vulnerable:	Linux kernel 2.6.30 .1 Linux kernel 2.6.30 -rc6 Linux kernel 2.6.30 -rc5 Linux kernel 2.6.30 -rc3 Linux kernel 2.6.30 -rc2 Linux kernel 2.6.30 -rc1 Linux kernel 2.6.30 Linux kernel 2.6.30.4 Linux kernel 2.6.30.3

Not Vulnerable:	Linux kernel 2.6.30.5

Discussion

Linux Kernel 'cmp_ies()' Remote Null Pointer Dereference Vulnerability

The Linux Kernel is prone to a remote NULL-pointer dereference vulnerability.

An attacker can exploit this issue to crash the system, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed.

Versions of the Linux kernel from 2.6.30-rc1 through 2.6.30.4 are vulnerable.

Exploit / POC

Linux Kernel 'cmp_ies()' Remote Null Pointer Dereference Vulnerability

An attacker can use readily available network utilities to exploit this issue.

The following exploit is available:

/data/vulnerabilities/exploits/36052.c

Solution / Fix

Linux Kernel 'cmp_ies()' Remote Null Pointer Dereference Vulnerability

Solution:
Updates are available. Please see the references for more information.

Linux kernel 2.6.30.4