Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-3613

high · 7.8

The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.

7.8
CVSS
12.5%
EPSS (exploit prob.)
96th
EPSS percentile
2009-10-19
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 2.6.27.21
linuxlinux_kernel2.2.27
linuxlinux_kernel2.4.36
linuxlinux_kernel2.4.36.1
linuxlinux_kernel2.4.36.2
linuxlinux_kernel2.4.36.3
linuxlinux_kernel2.4.36.4
linuxlinux_kernel2.4.36.5
linuxlinux_kernel2.4.36.6
linuxlinux_kernel2.6
linuxlinux_kernel2.6.0
linuxlinux_kernel2.6.1
linuxlinux_kernel2.6.2
linuxlinux_kernel2.6.2.27.13
linuxlinux_kernel2.6.3
linuxlinux_kernel2.6.4
linuxlinux_kernel2.6.5
linuxlinux_kernel2.6.8
linuxlinux_kernel2.6.10
linuxlinux_kernel2.6.11
linuxlinux_kernel2.6.11.1
linuxlinux_kernel2.6.11.2
linuxlinux_kernel2.6.11.3
linuxlinux_kernel2.6.11.4
linuxlinux_kernel2.6.11.5
linuxlinux_kernel2.6.11.6
linuxlinux_kernel2.6.11.7
linuxlinux_kernel2.6.11.8
linuxlinux_kernel2.6.11.9
linuxlinux_kernel2.6.11.10
linuxlinux_kernel2.6.11.11
linuxlinux_kernel2.6.11.12
linuxlinux_kernel2.6.12
linuxlinux_kernel2.6.12.1
linuxlinux_kernel2.6.12.2
linuxlinux_kernel2.6.12.3
linuxlinux_kernel2.6.12.4
linuxlinux_kernel2.6.12.5
linuxlinux_kernel2.6.12.6
linuxlinux_kernel2.6.13

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3613