CVE-2009-1633

Publication date 28 May 2009

Last updated 24 July 2024

Ubuntu priority

Description

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	9.04 jaunty	Fixed in 2.6.28-13.45
	8.10 intrepid	Fixed in 2.6.27-14.35
	8.04 LTS hardy	Fixed in 2.6.24-24.55
	6.06 LTS dapper	Not in release
linux-source-2.6.15	9.04 jaunty	Not in release
	8.10 intrepid	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Fixed in 2.6.15-54.77

References

Related Ubuntu Security Notices (USN)

USN-793-1
Linux kernel vulnerabilities
2 July 2009

Other references

https://www.cve.org/CVERecord?id=CVE-2009-1633