Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-0745

The ext4_group_add function in fs/ext4/resize.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not properly initialize the group descriptor during a resize (aka resize2fs) operation, which might allow local users to cause a denial of service (OOPS) by arranging for crafted values to be present in available memory.

Published

2009-02-27T17:30:09.920

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.9 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel 2.6.27 Yes
Operating System linux linux_kernel 2.6.27.1 Yes
Operating System linux linux_kernel 2.6.27.2 Yes
Operating System linux linux_kernel 2.6.27.3 Yes
Operating System linux linux_kernel 2.6.27.4 Yes
Operating System linux linux_kernel 2.6.27.5 Yes
Operating System linux linux_kernel 2.6.27.6 Yes
Operating System linux linux_kernel 2.6.27.7 Yes
Operating System linux linux_kernel 2.6.27.8 Yes
Operating System linux linux_kernel 2.6.27.9 Yes
Operating System linux linux_kernel 2.6.27.10 Yes
Operating System linux linux_kernel 2.6.27.11 Yes
Operating System linux linux_kernel 2.6.27.12 Yes
Operating System linux linux_kernel 2.6.27.13 Yes
Operating System linux linux_kernel 2.6.27.14 Yes
Operating System linux linux_kernel 2.6.27.15 Yes
Operating System linux linux_kernel 2.6.27.16 Yes
Operating System linux linux_kernel 2.6.27.17 Yes
Operating System linux linux_kernel 2.6.27.18 Yes
Operating System linux linux_kernel 2.6.28 Yes
Operating System linux linux_kernel 2.6.28.1 Yes
Operating System linux linux_kernel 2.6.28.2 Yes
Operating System linux linux_kernel 2.6.28.3 Yes
Operating System linux linux_kernel 2.6.28.4 Yes
Operating System linux linux_kernel 2.6.28.5 Yes
Operating System linux linux_kernel 2.6.28.6 Yes
References