CVE-2009-2910

Key facts

CVSS score

2.1 (v2.0)

Severity

LOW

CVSS vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness (CWE)

CWE-200

EPSS score

0.4% (34th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2009-2898)

Published

October 20, 2009

NVD last modified

June 16, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• fedoraproject / fedora
• linux / linux kernel
• opensuse / opensuse
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux workstation
• redhat / virtualization
• suse / linux enterprise debuginfo
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise software development kit

Certified products that may be affected

3 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• SUSE Linux Enterprise Server Version 9 with Service Pack 2, ProPack 4 for Service Pack 2 and certification-sles-sgi-eal3 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0292-2005 - archived
• SuSE Linux Enterprise Server Version 9 with certification-sles-ibm-eal4 package - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0256-2005 - archived

References

• http://git.kernel.org/?p=linux/kernel/git/x86/linux-2.6-tip.git%3Ba=commit%3Bh=24e35800cdc4350fc34e2bed37b608a9e13ab3b6
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00007.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html(Mailing List, Third Party Advisory)
• http://lkml.org/lkml/2009/10/1/164(Patch, Third Party Advisory)
• http://marc.info/?l=oss-security&m=125442304214452&w=2(Third Party Advisory)
• http://marc.info/?l=oss-security&m=125444390112831&w=2(Third Party Advisory)
• http://marc.info/?l=oss-security&m=125511635004768&w=2(Third Party Advisory)
• http://secunia.com/advisories/36927(Third Party Advisory)
• http://secunia.com/advisories/37075(Third Party Advisory)
• http://secunia.com/advisories/37351(Third Party Advisory)
• http://support.avaya.com/css/P8/documents/100073666(Third Party Advisory)
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.31.4(Broken Link)
• http://www.openwall.com/lists/oss-security/2009/10/02/1(Mailing List, Third Party Advisory)
• http://www.redhat.com/support/errata/RHSA-2009-1671.html(Third Party Advisory)
• http://www.securityfocus.com/bid/36576(Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/usn-864-1(Third Party Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=526788(Issue Tracking, Patch, Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10823(Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7359(Third Party Advisory)
• https://rhn.redhat.com/errata/RHSA-2009-1540.html(Third Party Advisory)
• https://rhn.redhat.com/errata/RHSA-2010-0046.html(Third Party Advisory)
• https://rhn.redhat.com/errata/RHSA-2010-0095.html(Third Party Advisory)
• https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00483.html(Third Party Advisory)