CVE-2009-4067

Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system.

Score

CVSS 3.1 6.8 Medium

Status

Modified - cve@mitre.org

Published

2020-02-11

Last modified

2024-08-07

Weaknesses

CWE-120

Affected products

• Linux Kernel (Linux)
• Enterprise Linux (Redhat)

References

• http://labs.mwrinfosecurity.com/files/Advisories/mwri_linux-usb-buffer-overflow_2009-10-29.pdf
• https://bugzilla.redhat.com/show_bug.cgi?id=722393