CVE-2009-3080

Key facts

CVSS score

7.2 (v2.0)

Severity

HIGH

CVSS vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness (CWE)

CWE-129

EPSS score

0.4% (36th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2009-3064)

Published

November 20, 2009

NVD last modified

June 16, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• linux / linux kernel
• opensuse / opensuse
• opensuse / opensuse
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server workstation
• redhat / fedora
• redhat / virtualization
• suse / linux enterprise desktop
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise server
• vmware / esx

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical

References

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0
• http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html(Mailing List, Third Party Advisory)
• http://secunia.com/advisories/37435(Broken Link)
• http://secunia.com/advisories/37720(Broken Link)
• http://secunia.com/advisories/37909(Broken Link)
• http://secunia.com/advisories/38017(Broken Link)
• http://secunia.com/advisories/38276(Broken Link)
• http://support.avaya.com/css/P8/documents/100073666(Third Party Advisory)
• http://www.debian.org/security/2010/dsa-2005(Third Party Advisory)
• http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc8(Broken Link)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:030(Broken Link)
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:051(Broken Link)
• http://www.redhat.com/support/errata/RHSA-2010-0041.html(Broken Link)
• http://www.redhat.com/support/errata/RHSA-2010-0882.html(Broken Link)
• http://www.securityfocus.com/bid/37068(Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/usn-864-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2011-0009.html(Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10989(Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12862(Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7101(Third Party Advisory)
• https://rhn.redhat.com/errata/RHSA-2010-0046.html(Third Party Advisory)
• https://rhn.redhat.com/errata/RHSA-2010-0095.html(Third Party Advisory)
• https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html(Mailing List, Third Party Advisory)