CVE-2009-2903

Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device is not found, allows remote attackers to cause a denial of service (memory consumption) via IP-DDP datagrams.

• CWE-772

• http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
• http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/36707Third Party Advisory
• http://secunia.com/advisories/37105Third Party Advisory
• http://secunia.com/advisories/37909Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:329Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/09/14/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/09/14/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/09/17/11Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/36379Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-852-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=522331Issue Tracking, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/davem/net-next-2.6.git%3Ba=commit%3Bh=ffcfb8db540ff879c2a85bf7e404954281443414
• http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/36707Third Party Advisory
• http://secunia.com/advisories/37105Third Party Advisory
• http://secunia.com/advisories/37909Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:329Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/09/14/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/09/14/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2009/09/17/11Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/36379Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-852-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=522331Issue Tracking, Third Party Advisory

Published

Sep 15, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2897Multiple cross-site scripting (XSS) vulnerabilities in hq/we…
• CVE-2009-2898Cross-site scripting (XSS) vulnerability in the Alerts list …
• CVE-2009-2899The monitor perl script in the Sybase database plug-in in Sp…
• CVE-2009-2900Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-2901The autodeployment process in Apache Tomcat 5.5.0 through 5.…
• CVE-2009-2902Directory traversal vulnerability in Apache Tomcat 5.5.0 thr…
• CVE-2009-2904A certain Red Hat modification to the ChrootDirectory featur…
• CVE-2009-2905Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51…
• CVE-2009-2906smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 befo…
• CVE-2009-2907Multiple cross-site scripting (XSS) vulnerabilities in Sprin…
• CVE-2009-2908The d_delete function in fs/ecryptfs/inode.c in eCryptfs in …
• CVE-2009-2909Integer signedness error in the ax25_setsockopt function in …