{"id":"CVE-2009-4138","state":"PUBLISHED","title":"drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and s","description":"drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.","publishedAt":"2009-12-16T19:00:00.000Z","updatedAt":"2024-08-07T06:54:09.937Z","severity":null,"assigner":"redhat","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/37339","http://secunia.com/advisories/38276","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376","http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","http://support.avaya.com/css/P8/documents/100073666","http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","https://bugzilla.redhat.com/show_bug.cgi?id=547236","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527","http://patchwork.kernel.org/patch/66747/","http://www.openwall.com/lists/oss-security/2009/12/15/1","http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log","https://rhn.redhat.com/errata/RHSA-2010-0095.html","http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","https://rhn.redhat.com/errata/RHSA-2010-0046.html","http://www.debian.org/security/2010/dsa-2005","http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54","http://secunia.com/advisories/38017"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:26.132Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2009/4xxx/CVE-2009-4138.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2009-4138","state":"PUBLISHED","datePublished":"2009-12-16T19:00:00.000Z","dateUpdated":"2024-08-07T06:54:09.937Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2009-12-01T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/37339","name":"37339","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/38276","name":"38276","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376","name":"oval:org.mitre.oval:def:7376","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","name":"SUSE-SA:2010:001","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","name":"SUSE-SA:2010:012","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547236","tags":["x_refsource_CONFIRM"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527","name":"oval:org.mitre.oval:def:9527","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://patchwork.kernel.org/patch/66747/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/15/1","name":"[oss-security] 20091215 CVE-2009-4138 kernel: firewire: ohci: handle receive packets with a data length of zero","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log","tags":["x_refsource_CONFIRM"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","name":"RHSA-2010:0095","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","name":"SUSE-SA:2010:005","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","name":"RHSA-2010:0046","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.debian.org/security/2010/dsa-2005","name":"DSA-2005","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/38017","name":"38017","tags":["third-party-advisory","x_refsource_SECUNIA"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"datePublic":"2009-12-15T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/37339","name":"37339","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/38276","name":"38276","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376","name":"oval:org.mitre.oval:def:7376","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html","name":"SUSE-SA:2010:001","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://support.avaya.com/css/P8/documents/100073666","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html","name":"SUSE-SA:2010:012","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547236","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527","name":"oval:org.mitre.oval:def:9527","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://patchwork.kernel.org/patch/66747/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2009/12/15/1","name":"[oss-security] 20091215 CVE-2009-4138 kernel: firewire: ohci: handle receive packets with a data length of zero","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","name":"RHSA-2010:0095","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html","name":"SUSE-SA:2010:005","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0046.html","name":"RHSA-2010:0046","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2010/dsa-2005","name":"DSA-2005","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/38017","name":"38017","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T06:54:09.937Z"}}]}}}