Bug 518271 (CVE-2009-2844)

Summary:	CVE-2009-2844: Vulnerabilities in the kernel
Product:	Red Hat Enterprise Linux 5	Reporter:	Ethan Baker <bakere>
Component:	kernel	Assignee:	Red Hat Kernel Manager <kernel-mgr>
Status:	CLOSED NOTABUG	QA Contact:	Red Hat Kernel QE team <kernel-qe>
Severity:	medium	Docs Contact:
Priority:	low
Version:	5.3	CC:	mjc, security-response-team, vdanen
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-08-19 20:49:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ethan Baker 2009-08-19 17:17:37 UTC

Description of problem:
A NULL pointer dereference exists within the "cmp_ies()" function in net/wireless/scan.c. This can be exploited to crash a vulnerable system by tricking it into scanning and processing specially crafted SSID IEs. (Quoted from Secunia)

Version-Release number of selected component (if applicable):
ALL

Please refer to the following article. This concerns issue (2):

http://secunia.com/advisories/36278/

Comment 1 Mark J. Cox 2009-08-19 20:49:23 UTC

Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Please note this issue only affected Linux kernel versions after v2.6.30-rc1 and was fixed in v2.6.31-rc6. 

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2844