Vulnerabilidad en udev (CVE-2009-1185)
Gravedad CVSS v2.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
17/04/2009
Última modificación:
09/04/2025
Descripción
udev antes de v1.4.1 no verifica si un mensaje NETLINK es generado desde el espacio del kernel, lo que permite a usuarios locales obtener privilegios mediante el envio de un mensaje NETLIINK desde el espacio de usuario.
Impacto
Puntuación base 2.0
7.20
Gravedad 2.0
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:udev_project:udev:*:*:*:*:*:*:*:* | 141 (excluyendo) | |
| cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:* | ||
| cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:* | ||
| cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:* | ||
| cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:* | ||
| cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:* | ||
| cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:* | ||
| cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:* | ||
| cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* | ||
| cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:* | ||
| cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba%3Dcommitdiff%3Bh%3De2b362d9f23d4c63018709ab5f81a02f72b91e75
- http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba%3Dcommitdiff%3Bh%3De86a923d508c2aed371cdd958ce82489cf2ab615
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html
- http://lists.vmware.com/pipermail/security-announce/2009/000060.html
- http://secunia.com/advisories/34731
- http://secunia.com/advisories/34750
- http://secunia.com/advisories/34753
- http://secunia.com/advisories/34771
- http://secunia.com/advisories/34776
- http://secunia.com/advisories/34785
- http://secunia.com/advisories/34787
- http://secunia.com/advisories/34801
- http://secunia.com/advisories/35766
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399
- http://wiki.rpath.com/Advisories:rPSA-2009-0063
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063
- http://www.debian.org/security/2009/dsa-1772
- http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2009%3A103
- http://www.mandriva.com/security/advisories?name=MDVSA-2009%3A104
- http://www.redhat.com/support/errata/RHSA-2009-0427.html
- http://www.securityfocus.com/archive/1/502752/100/0/threaded
- http://www.securityfocus.com/archive/1/504849/100/0/threaded
- http://www.securityfocus.com/bid/34536
- http://www.securitytracker.com/id?1022067=
- http://www.ubuntu.com/usn/usn-758-1
- http://www.vmware.com/security/advisories/VMSA-2009-0009.html
- http://www.vupen.com/english/advisories/2009/1053
- http://www.vupen.com/english/advisories/2009/1865
- https://bugzilla.redhat.com/show_bug.cgi?id=495051
- https://launchpad.net/bugs/cve/2009-1185
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975
- https://www.exploit-db.com/exploits/8572
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html
- http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba%3Dcommitdiff%3Bh%3De2b362d9f23d4c63018709ab5f81a02f72b91e75
- http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba%3Dcommitdiff%3Bh%3De86a923d508c2aed371cdd958ce82489cf2ab615
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html
- http://lists.vmware.com/pipermail/security-announce/2009/000060.html
- http://secunia.com/advisories/34731
- http://secunia.com/advisories/34750
- http://secunia.com/advisories/34753
- http://secunia.com/advisories/34771
- http://secunia.com/advisories/34776
- http://secunia.com/advisories/34785
- http://secunia.com/advisories/34787
- http://secunia.com/advisories/34801
- http://secunia.com/advisories/35766
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399
- http://wiki.rpath.com/Advisories:rPSA-2009-0063
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063
- http://www.debian.org/security/2009/dsa-1772
- http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml
- http://www.mandriva.com/security/advisories?name=MDVSA-2009%3A103
- http://www.mandriva.com/security/advisories?name=MDVSA-2009%3A104
- http://www.redhat.com/support/errata/RHSA-2009-0427.html
- http://www.securityfocus.com/archive/1/502752/100/0/threaded
- http://www.securityfocus.com/archive/1/504849/100/0/threaded
- http://www.securityfocus.com/bid/34536
- http://www.securitytracker.com/id?1022067=
- http://www.ubuntu.com/usn/usn-758-1
- http://www.vmware.com/security/advisories/VMSA-2009-0009.html
- http://www.vupen.com/english/advisories/2009/1053
- http://www.vupen.com/english/advisories/2009/1865
- https://bugzilla.redhat.com/show_bug.cgi?id=495051
- https://launchpad.net/bugs/cve/2009-1185
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975
- https://www.exploit-db.com/exploits/8572
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html