CVE ID:	CVE-2009-4005
Description:	The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.
Test IDs:	1.3.6.1.4.1.25623.1.0.66954   1.3.6.1.4.1.25623.1.1.1.1.2010.2005
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4005 BugTraq ID: 37036 http://www.securityfocus.com/bid/37036 Debian Security Information: DSA-2005 (Google Search) http://www.debian.org/security/2010/dsa-2005 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:030 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11155 http://secunia.com/advisories/37720 http://secunia.com/advisories/37909 http://secunia.com/advisories/38017 http://secunia.com/advisories/38276 SuSE Security Announcement: SUSE-SA:2009:061 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html SuSE Security Announcement: SUSE-SA:2009:064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html SuSE Security Announcement: SUSE-SA:2010:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html SuSE Security Announcement: SUSE-SA:2010:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html SuSE Security Announcement: SUSE-SA:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html http://www.ubuntu.com/usn/usn-864-1 http://www.vupen.com/english/advisories/2009/3267 XForce ISS Database: kernel-hfcusb-privilege-escalation(54310) https://exchange.xforce.ibmcloud.com/vulnerabilities/54310