CVE-2009-2848

Key facts

CVSS score

5.9 (v2.0)

Severity

MEDIUM

CVSS vector

AV:L/AC:M/Au:N/C:P/I:P/A:C

Weakness (CWE)

CWE-269

EPSS score

0.5% (43th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2009-2838)

Published

August 18, 2009

NVD last modified

June 16, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• fedoraproject / fedora
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• novell / linux desktop
• opensuse / opensuse
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise server
• vmware / esx
• vmware / vma

Certified products that may be affected

3 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and certification-sles-sgi-eal3 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0292-2005 - archived
• SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0256-2005 - archived

References

• http://article.gmane.org/gmane.linux.kernel/871942(Broken Link)
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html(Mailing List, Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2009-1243.html(Third Party Advisory)
• http://secunia.com/advisories/35983(Broken Link)
• http://secunia.com/advisories/36501(Broken Link)
• http://secunia.com/advisories/36562(Broken Link)
• http://secunia.com/advisories/36759(Broken Link)
• http://secunia.com/advisories/37105(Broken Link)
• http://secunia.com/advisories/37351(Broken Link)
• http://secunia.com/advisories/37471(Broken Link)
• http://www.openwall.com/lists/oss-security/2009/08/04/2(Exploit, Mailing List, Third Party Advisory)
• http://www.openwall.com/lists/oss-security/2009/08/05/10(Exploit, Mailing List, Third Party Advisory)
• http://www.redhat.com/support/errata/RHSA-2009-1438.html(Broken Link)
• http://www.securityfocus.com/archive/1/507985/100/0/threaded(Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/archive/1/512019/100/0/threaded(Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-852-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2009-0016.html(Third Party Advisory)
• http://www.vupen.com/english/advisories/2009/3316(Broken Link)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52899(Third Party Advisory, VDB Entry)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11412(Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8598(Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9766(Third Party Advisory)
• https://rhn.redhat.com/errata/RHSA-2009-1550.html(Third Party Advisory)
• https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01256.html(Mailing List, Third Party Advisory)