NetSight
IP …
medium6.9

CVE-2009-2406

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows …

Impact

Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving a crafted eCryptfs file, related to not ensuring that the key signature length in a Tag 11 packet is compatible with the key signature buffer size.

Affected products

VendorProductAffected versions
LinuxKernel
Versions 2.6.24.7, 2.6.25.15
LinuxLinux Kernel
through 2.6.30.3
Versions 2.2.6, 2.6, 2.6.0, 2.6.1, 2.6.2

Weakness classification

CWE-119

References