CVE-2009-2698

🗓️ 27 Aug 2009 17:30:00Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 23 Views

Linux kernel udp_sendmsg function vulnerability

Reporter	Title	Published	Views	Family All 126
0day.today	Linux Kernel 2.6 < 2.6.19 (32bit) ip_append_data() ring0 Root Exploit	31 Aug 200900:00	–	zdt
0day.today	Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit (x86/x64)	2 Sep 200900:00	–	zdt
0day.today	Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit	2 Sep 200900:00	–	zdt
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec

NVD

Node

linux linux_kernelRange<2.6.19

Node

canonical ubuntu_linuxMatch6.06lts

OR

canonical ubuntu_linuxMatch8.04lts

OR

canonical ubuntu_linuxMatch8.10

OR

canonical ubuntu_linuxMatch9.04

Node

suse linux_enterprise_desktopMatch10sp2

OR

suse linux_enterprise_serverMatch9

OR

suse linux_enterprise_serverMatch10sp2

Node

fedoraproject fedoraMatch10

Node

redhat enterprise_linux_desktopMatch4.0

OR

redhat enterprise_linux_desktopMatch5.0

OR

redhat enterprise_linux_eusMatch4.8

OR

redhat enterprise_linux_eusMatch5.3

OR

redhat enterprise_linux_serverMatch4.0

OR

redhat enterprise_linux_serverMatch5.0

OR

redhat enterprise_linux_server_ausMatch5.3

OR

redhat enterprise_linux_workstationMatch4.0

OR

redhat enterprise_linux_workstationMatch5.0

Node

vmware vcenter_serverMatch4.0-

OR

vmware esxiMatch4.0

Source	Link
redhat	www.redhat.com/support/errata/RHSA-2009-1233.html
git	www.git.kernel.org/
secunia	www.secunia.com/advisories/37471
secunia	www.secunia.com/advisories/23073
secunia	www.secunia.com/advisories/37105
rhn	www.rhn.redhat.com/errata/RHSA-2009-1223.html
lists	www.lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html
securityfocus	www.securityfocus.com/archive/1/507985/100/0/threaded
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514
kernel	www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19

23 Apr 2026 00:35Current

7.2High risk

Vulners AI Score7.2

CVSS 27.2

CVSS 3.17.8

EPSS0.26117

cve-2009-2698 linux kernel udp implementation privilege escalation denial of service null pointer dereference system crash msg_more flag udp socket