CVE-2009-2698

Key facts

CVSS score

7.8 (v3.1)

Severity

HIGH

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-476

EPSS score

7.1% (94th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2009-2690)

Published

August 27, 2009

NVD last modified

June 16, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• fedoraproject / fedora
• linux / linux kernel
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise server
• vmware / esxi
• vmware / vcenter server

Certified products that may be affected

4 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• Red Hat Enterprise Linux AS, Version 4 Update 4 - Red Hat, Inc. - Common Criteria CCEVS-VR-0035-2006 - archived
• SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and certification-sles-sgi-eal3 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0292-2005 - archived
• SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0256-2005 - archived

References

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46(Broken Link)
• http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html(Mailing List, Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2009-1222.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2009-1223.html(Third Party Advisory)
• http://secunia.com/advisories/23073(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/36430(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/36510(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/37105(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/37298(Broken Link, Vendor Advisory)
• http://secunia.com/advisories/37471(Broken Link, Vendor Advisory)
• http://support.avaya.com/css/P8/documents/100067254(Third Party Advisory)
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19(Broken Link, Vendor Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:051(Broken Link, Third Party Advisory)
• http://www.openwall.com/lists/oss-security/2009/08/25/1(Mailing List)
• http://www.redhat.com/support/errata/RHSA-2009-1233.html(Broken Link, Third Party Advisory)
• http://www.securityfocus.com/archive/1/507985/100/0/threaded(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/archive/1/512019/100/0/threaded(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/bid/36108(Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id?1022761(Broken Link, Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-852-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html(Third Party Advisory)
• http://www.vupen.com/english/advisories/2009/3316(Permissions Required)
• https://bugzilla.redhat.com/show_bug.cgi?id=518034(Issue Tracking, Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514(Broken Link, Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557(Broken Link, Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142(Broken Link, Third Party Advisory)