‹ Volver al listado

CVE-2009-0746

Estado: ModificadaMedia (4.9)—Exploit
Gravedad4.9Media · CVSS 2.0
Probabilidad de explotación0.75 %mayor que el 54 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoDisponiblePublicado en Exploit-DB

La función make_indexed_dir en fs/ext4/namei.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28 anteriores a v2.6.28.7 no valida el campo rec_len, lo que permite a usuarios locales provocar una denegación de servicio (OOPS ) por tratar de montar un sistema de archivos ext4 manipulado.

CVSS

Puntuación base
4.9
Versión
2.0
Vector
AV:L/AC:L/Au:N/C:N/I:N/A:C

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días
0.75 %
Percentil entre todas las CVEs puntuadas
54
Fecha de la puntuación
21/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

Linux — Linux Kernel

CWE

Referencias

Mostrar las 36 referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0746",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-27T17:30:09.937",
  "references": [
    {
      "url": "http://bugzilla.kernel.org/show_bug.cgi?id=12430",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/52202",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/34394",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/36562",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/37471",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2009/dsa-1749",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ubuntu.com/usn/usn-751-1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0509",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/3316",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48872",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugzilla.kernel.org/show_bug.cgi?id=12430",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e6b8bc09ba2075cd91fbffefcd2778b1a00bd76f",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.19",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/52202",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2009-1243.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/34394",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/36562",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/37471",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2009/dsa-1749",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/507985/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/usn-751-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vmware.com/security/advisories/VMSA-2009-0016.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0509",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/3316",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/48872",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10342",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8039",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The make_indexed_dir function in fs/ext4/namei.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate a certain rec_len field, which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem."
    },
    {
      "lang": "es",
      "value": "La función make_indexed_dir en fs/ext4/namei.c en el kernel de Linux v2.6.27 anteriores a v2.6.27.19 y v2.6.28  anteriores a v2.6.28.7 no valida el campo rec_len, lo que permite a usuarios locales provocar una denegación de servicio (OOPS ) por tratar de montar un sistema de archivos ext4 manipulado."
    }
  ],
  "lastModified": "2026-06-16T23:05:43.033",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "856FE78A-29B5-4411-98A0-4B0281C17EB9"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "324B5A3E-FA65-4F02-9B8F-872F38CD1808"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C75A8FC4-58D2-4B6A-9D8E-FF12DF52E249"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE21E2AE-9E01-471C-A419-6AB40A49C2F0"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADFC2D46-65D0-426F-9AF8-8C910AE91D49"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11795F8E-7ACD-4597-9194-FC7241DCE057"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60F381E1-F3C5-49BE-B094-4D90E7B108F1"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D82A6217-CFA6-4E72-8BED-0297E13EABF6"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CEA1AF2-2DE7-4B38-987D-15FFA70F06B8"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7954A701-1671-4080-B1E6-47E0208FD28C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63D06512-EAF0-48C6-98F0-066E63FF07EC"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F35DA6B-C6D4-47CC-97E7-9659DCFDD162"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D75B48F1-623A-4B96-9E08-4AA2DE748490"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E6EB7C3-D9AB-43E7-8B78-2C36AE920935"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FC87A28-C6A1-4E90-BD9F-A5BE1985DB50"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0383E2A5-60EE-47F3-9DA8-BF75028D511F"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8B0C229-2A79-47E0-856A-2AE0FF97B967"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB27B247-D6BF-49C4-B113-76C9A47B7DCD"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.27.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F94BA1B0-52B9-4303-9C41-3ACC3AC1945E"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26BD805F-08EB-42EC-BC54-26A7278E5089"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "217715A5-E69D-45C0-B8E4-5681528C651B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A87AD66C-4321-4459-8556-3B0BA38C493A"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87A347E0-9C0B-4674-9363-3C36DA27AC45"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E0F3DF0-6BD0-4560-9A13-C6493939D8B0"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4BE1DF7-99CB-416B-B6F9-EC40FBD7D1C6"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.28.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B93AF773-FBB4-4A4A-ADD5-ADA40C24CD36"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "vendorComments": [
    {
      "comment": "This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and Red Hat Enterprise MRG. \n\nThis issue was addressed in Red Hat Enterprise Linux 5 by\nhttps://rhn.redhat.com/errata/RHSA-2009-1243.html",
      "lastModified": "2009-09-02T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}