PT-2009-6721 · Linux+1 · Libvolume-Id0+10
Jon Oberheide
·
Published
1970-01-01
·
Updated
2023-02-13
·
CVE-2009-1185
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
udev versions prior to 1.4.1
libudev0-128
libudev-devel-128
libvolume-id0
libvolume id-095-14.20.el5 3
libvolume id-devel-095
libvolume id1-128
libvolume-id-dev
udev-095
udev-128
udev-debuginfo-128
udev-debuginfo-085
udev-debugsource-128
udev-udeb
Description
The issue concerns multiple vulnerabilities in the udev package and related libraries, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally, allowing local users to gain privileges by sending a NETLINK message from user space. The estimated number of potentially affected devices worldwide is not specified.
Recommendations
For udev versions prior to 1.4.1, update to version 1.4.1 or later.
For libudev0-128, libudev-devel-128, libvolume-id0, libvolume id-095-14.20.el5 3, libvolume id-devel-095, libvolume id1-128, libvolume-id-dev, udev-095, udev-128, udev-debuginfo-128, udev-debuginfo-085, udev-debugsource-128, and udev-udeb, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Red Hat
Libudev-Devel
Libudev0
Libvolume Id-Devel
Libvolume-Id0
Libvolume Id
Libvolume Id1
Udev
Udev-Debuginfo
Udev-Debugsource
Udev-Udeb