CVE-2009-4536

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain…

published January 12, 2010

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05227 · 92.5th percentile
Published
2010-01-12T17:00Z
EPSS history
Timeline
  • 12 JAN 17:00Z
    drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain…
    cvelistv5