CVE ID:	CVE-2009-4138
Description:	drivers/firewire/ohci.c in the Linux kernel before 2.6.32-git9, when packet-per-buffer mode is used, allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unknown other impact via an unspecified ioctl associated with receiving an ISO packet that contains zero in the payload-length field.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.1.2010.2005
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4138 37339 http://www.securityfocus.com/bid/37339 38017 http://secunia.com/advisories/38017 38276 http://secunia.com/advisories/38276 DSA-2005 http://www.debian.org/security/2010/dsa-2005 RHSA-2010:0046 https://rhn.redhat.com/errata/RHSA-2010-0046.html RHSA-2010:0095 https://rhn.redhat.com/errata/RHSA-2010-0095.html SUSE-SA:2010:001 http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00000.html SUSE-SA:2010:005 http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00005.html SUSE-SA:2010:012 http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html [oss-security] 20091215 CVE-2009-4138 kernel: firewire: ohci: handle receive packets with a data length of zero http://www.openwall.com/lists/oss-security/2009/12/15/1 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8c0c0cc2d9f4c523fde04bdfe41e4380dec8ee54 http://patchwork.kernel.org/patch/66747/ http://patchwork.kernel.org/patch/66747/ http://support.avaya.com/css/P8/documents/100073666 http://support.avaya.com/css/P8/documents/100073666 http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.32-git9.log https://bugzilla.redhat.com/show_bug.cgi?id=547236 https://bugzilla.redhat.com/show_bug.cgi?id=547236 oval:org.mitre.oval:def:7376 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7376 oval:org.mitre.oval:def:9527 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9527