Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2009:1223
HistoryAug 24, 2009 - 3:30 p.m.

kernel security update

2009-08-2415:30:11
CentOS Project
lists.centos.org
53

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

16.6%

JSON

CentOS Errata and Security Advisory CESA-2009:1223

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

These updated packages fix the following security issues:

  • a flaw was found in the SOCKOPS_WRAP macro in the Linux kernel. This
    macro did not initialize the sendpage operation in the proto_ops structure
    correctly. A local, unprivileged user could use this flaw to cause a local
    denial of service or escalate their privileges. (CVE-2009-2692, Important)

  • a flaw was found in the udp_sendmsg() implementation in the Linux kernel
    when using the MSG_MORE flag on UDP sockets. A local, unprivileged user
    could use this flaw to cause a local denial of service or escalate their
    privileges. (CVE-2009-2698, Important)

Red Hat would like to thank Tavis Ormandy and Julien Tinnes of the Google
Security Team for responsibly reporting these flaws.

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2009-August/078269.html
https://lists.centos.org/pipermail/centos-announce/2009-August/078270.html

Affected packages:
kernel
kernel-devel
kernel-doc
kernel-hugemem
kernel-hugemem-devel
kernel-largesmp
kernel-largesmp-devel
kernel-smp
kernel-smp-devel
kernel-xenU
kernel-xenU-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2009:1223

OSVersionArchitecturePackageVersionFilename
CentOS4x86_64kernel< 2.6.9-89.0.9.ELkernel-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel-devel< 2.6.9-89.0.9.ELkernel-devel-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4noarchkernel-doc< 2.6.9-89.0.9.ELkernel-doc-2.6.9-89.0.9.EL.noarch.rpm
CentOS4x86_64kernel-largesmp< 2.6.9-89.0.9.ELkernel-largesmp-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel-largesmp-devel< 2.6.9-89.0.9.ELkernel-largesmp-devel-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel-smp< 2.6.9-89.0.9.ELkernel-smp-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel-smp-devel< 2.6.9-89.0.9.ELkernel-smp-devel-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel-xenu< 2.6.9-89.0.9.ELkernel-xenU-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel-xenu-devel< 2.6.9-89.0.9.ELkernel-xenU-devel-2.6.9-89.0.9.EL.x86_64.rpm
CentOS4x86_64kernel< 2.6.9-89.0.9.ELkernel-2.6.9-89.0.9.EL.x86_64.rpm
Rows per page:
1-10 of 441

Related

openvas 67
nessus 38
canvas 1
redhat 6
centos 2
oraclelinux 4
seebug 11
securityvulns 4
slackware 1
osv 4
packetstorm 1
veracode 2
prion 2
debian 4
ubuntucve 2
ubuntu 2
exploitpack 5
suse 2
altlinux 1
checkpoint_security 1
android 1
cve 3
exploitdb 4
f5 2
vmware 3
fedora 8
kitploit 1
openvas
openvas
CentOS Update for kernel CESA-2009:1222 centos5 i386
2011-08-09 00:00:00
CentOS Update for kernel CESA-2009:1222 centos5 i386
2011-08-09 00:00:00
CentOS Update for kernel CESA-2009:1233 centos3 i386
2011-08-09 00:00:00
nessus
nessus
RHEL 3 : kernel (RHSA-2009:1233)
2009-08-28 00:00:00
RHEL 4 : kernel (RHSA-2009:1223)
2009-08-25 00:00:00
CentOS 4 : kernel (CESA-2009:1223)
2009-08-25 00:00:00
canvas
canvas
Immunity Canvas: PROTO_OPS_NULL
2009-08-27 17:30:00
redhat
redhat
(RHSA-2009:1222) Important: kernel security and bug fix update
2009-08-24 00:00:00
(RHSA-2009:1233) Important: kernel security update
2009-08-27 00:00:00
(RHSA-2009:1223) Important: kernel security update
2009-08-24 00:00:00
centos
centos
kernel security update
2009-08-24 19:35:59
kernel security update
2009-08-28 22:30:59
oraclelinux
oraclelinux
kernel security and bug fix update
2009-08-24 00:00:00
kernel security update
2009-08-27 00:00:00
kernel security update
2009-08-24 00:00:00
seebug
seebug
Linux Kernel 2.4/2.6 sock_sendpage() ring0 Root Exploit (simple ver)
2009-08-25 00:00:00
Linux Kernel 2.x - sock_sendpage() Local Root Exploit (Android Edition)
2014-07-01 00:00:00
Linux Kernel 2.6 &lt; 2.6.19 (32bit) ip_append_data() ring0 Root Exploit
2009-09-01 00:00:00
securityvulns
securityvulns
Linux kernel uninitialized pointers
2009-08-31 00:00:00
Linux kernel multiple security vulnerabilities
2009-08-25 00:00:00
[SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities
2009-08-25 00:00:00
slackware
slackware
kernel
2009-08-18 20:47:47
osv
osv
linux-2.6.24 - privilege escalation
2009-08-16 00:00:00
linux-2.6 - privilege escalation
2009-08-14 00:00:00
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2009-08-16 00:00:00
packetstorm
packetstorm
Linux Kernel Sendpage Local Privilege Escalation
2012-07-19 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:36:00
Privilege Escalation
2020-04-10 00:36:20
prion
prion
Null pointer dereference
2009-08-14 15:16:00
Null pointer dereference
2009-08-27 17:30:00
debian
debian
[SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation
2009-08-16 16:42:51
[SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation
2009-08-14 19:31:10
[SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities
2009-08-24 18:59:41
ubuntucve
ubuntucve
CVE-2009-2692
2009-08-13 00:00:00
CVE-2009-2698
2009-08-27 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2009-08-19 00:00:00
Linux kernel vulnerabilities
2009-10-22 00:00:00
exploitpack
exploitpack
Linux Kernel 2.6.19 (x86x64) - udp_sendmsg Local Privilege Escalation (2)
2009-09-02 00:00:00
Linux Kernel 2.6.19 (Debian 4) - udp_sendmsg Local Privilege Escalation (3)
2009-09-02 00:00:00
Linux Kernel 2.6 2.6.19 (White Box 4 CentOS 4.44.5 Fedora Core 456 x86) - ip_append_data() Ring0 Privilege Escalation (1)
2009-08-31 00:00:00
suse
suse
local privilege escalation in kernel
2009-08-28 14:29:52
local privilege escalation in kernel
2009-08-20 16:02:11
altlinux
altlinux
Security fix for the ALT Linux 5 package kernel-image-ovz-smp version 2.6.27-alt9
2009-08-17 00:00:00
checkpoint_security
checkpoint_security
Check Point response to Linux NULL pointer dereference vulnerability (CVE-2009-2692)
2009-08-18 21:00:00
android
android
sock_sendpage
2009-08-13 00:00:00
cve
cve
CVE-2009-2692
2009-08-14 15:16:00
CVE-2009-2698
2009-08-27 17:30:00
CVE-2009-2962
2009-08-21 11:02:00
exploitdb
exploitdb
Linux Kernel &lt; 2.6.19 (x86/x64) - &#039;udp_sendmsg&#039; Local Privilege Escalation (2)
2009-09-02 00:00:00
Linux Kernel 2.6 &lt; 2.6.19 (White Box 4 / CentOS 4.4/4.5 / Fedora Core 4/5/6 x86) - &#039;ip_append_data()&#039; Ring0 Privilege Escalation (1)
2009-08-31 00:00:00
Linux Kernel &lt; 2.6.19 (Debian 4) - &#039;udp_sendmsg&#039; Local Privilege Escalation (3)
2009-09-02 00:00:00
f5
f5
K10772 : Linux NULL pointer dereference vulnerability - CVE-2009-2692
2013-07-05 00:00:00
SOL10772 - Linux NULL pointer dereference vulnerability - CVE-2009-2692
2009-11-15 00:00:00
vmware
vmware
ESX 3.5 third party update for Service Console kernel
2010-06-24 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: kernel-2.6.29.6-217.2.7.fc11
2009-08-15 21:45:53
[SECURITY] Fedora 11 Update: kernel-2.6.29.6-217.2.8.fc11
2009-08-17 22:00:48
[SECURITY] Fedora 10 Update: kernel-2.6.27.29-170.2.79.fc10
2009-08-15 21:45:33
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

16.6%

JSON
Related for CESA-2009:1223
openvas67nessus38canvas1redhat6centos2oraclelinux4seebug11securityvulns4slackware1osv4packetstorm1veracode2prion2debian4ubuntucve2ubuntu2exploitpack5suse2altlinux1checkpoint_security1android1cve3exploitdb4f52vmware3fedora8kitploit1