NetSight
IP …
medium4.9

CVE-2009-1336

fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which al…

Impact

fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.22.19
Versions 2.6, 2.6.0, 2.6.1, 2.6.2, 2.6.10

Weakness classification

CWE-20

References