Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-0065

high · 10

Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.

10
CVSS
16.7%
EPSS (exploit prob.)
97th
EPSS percentile
2009-01-07
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 2.6.27
linuxlinux_kernel2.2.27
linuxlinux_kernel2.4.36
linuxlinux_kernel2.4.36.1
linuxlinux_kernel2.4.36.2
linuxlinux_kernel2.4.36.3
linuxlinux_kernel2.4.36.4
linuxlinux_kernel2.4.36.5
linuxlinux_kernel2.4.36.6
linuxlinux_kernel2.6
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.19.4
linuxlinux_kernel2.6.19.5
linuxlinux_kernel2.6.19.6
linuxlinux_kernel2.6.19.7
linuxlinux_kernel2.6.20.16
linuxlinux_kernel2.6.20.17
linuxlinux_kernel2.6.20.18
linuxlinux_kernel2.6.20.19
linuxlinux_kernel2.6.20.20
linuxlinux_kernel2.6.20.21
linuxlinux_kernel2.6.21.5
linuxlinux_kernel2.6.21.6
linuxlinux_kernel2.6.21.7
linuxlinux_kernel2.6.22
linuxlinux_kernel2.6.22.1
linuxlinux_kernel2.6.22.2
linuxlinux_kernel2.6.22.8
linuxlinux_kernel2.6.22.9
linuxlinux_kernel2.6.22.10
linuxlinux_kernel2.6.22.11
linuxlinux_kernel2.6.22.12
linuxlinux_kernel2.6.22.13

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0065