Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2844

EPSS 1.74% · P83
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2844

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames in which one frame omits an SSID Information Element (IE) and the subsequent frame contains an SSID IE, which triggers a NULL pointer dereference in the cmp_ies function. NOTE: a potential weakness in the is_mesh function was also addressed, but the relevant condition did not exist in the code, so it is not a vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux Kernel cfg80211空指针引用拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel的net/wireless/scan.c文件中的cfg80211无线配置API没有正确地处理一系列信标帧。如果其中的一个帧遗漏了SSID信息元素(IE)而接下来的帧中包含有SSID IE，就会在cmp_ies函数中触发空指针引用，导致拒绝服务的情况。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2844

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2844

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-08-18 · 47 CVEs total

CVE-2009-2851WordPress 管理员操作界面 跨站脚本攻击漏洞
CVE-2009-2854WordPress 权限许可和访问控制漏洞
CVE-2009-1872Adobe ColdFusion Server 服务器 多个跨站脚本攻击漏洞
CVE-2009-1875Adobe ColdFusion 多个跨站脚本攻击漏洞
CVE-2009-1876Adobe ColdFusion 敏感信息泄露漏洞
CVE-2009-1877Adobe ColdFusion 跨站脚本攻击漏洞
CVE-2009-1878Adobe ColdFusion 会话固定漏洞
CVE-2009-2856sun solaris 信息泄露漏洞
CVE-2009-1874Adobe Jrun 管理控制台 多个跨站脚本攻击漏洞
CVE-2009-2852WordPress WP-Syntax 'test/index.php'远程PHP代码执行漏洞
CVE-2009-2853wordpress 权限许可漏洞
CVE-2009-2850nasa_goddard_space_flight_center common_data_format 缓冲区溢出漏洞
CVE-2009-2849Linux kernel md驱动本地拒绝服务漏洞
CVE-2009-2848Linux kernel execve函数本地拒绝服务漏洞
CVE-2009-2847Linux Kernel kernel/signal.c do_sigaltstack函数敏感信息泄露漏洞
CVE-2009-2846Linux Kernel eisa_eeprom_read函数绕过安全检查漏洞
CVE-2008-7003The Rat CMS 'login.php' 多个SQL注入漏洞
CVE-2008-7002PHP 多个函数 访问控制漏洞
CVE-2008-7001Creative Mind Creator CMS 任意文件上传漏洞
CVE-2008-7000PHPauction 'index.php' PHP远程文件包含漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2844

No comments yet

Leave a comment