Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-2698
HistoryAug 27, 2009 - 5:30 p.m.

CVE-2009-2698

2009-08-2717:30:00
CWE-476
[email protected]
web.nvd.nist.gov
9

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Affected configurations

Nvd
Node
linuxlinux_kernelRange<2.6.19
Node
canonicalubuntu_linuxMatch6.06lts
OR
canonicalubuntu_linuxMatch8.04lts
OR
canonicalubuntu_linuxMatch8.10
OR
canonicalubuntu_linuxMatch9.04
Node
suselinux_enterprise_desktopMatch10sp2
OR
suselinux_enterprise_serverMatch9
OR
suselinux_enterprise_serverMatch10sp2
Node
fedoraprojectfedoraMatch10
Node
redhatenterprise_linux_desktopMatch4.0
OR
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_eusMatch4.8
OR
redhatenterprise_linux_eusMatch5.3
OR
redhatenterprise_linux_serverMatch4.0
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_server_ausMatch5.3
OR
redhatenterprise_linux_workstationMatch4.0
OR
redhatenterprise_linux_workstationMatch5.0
Node
vmwarevcenter_serverMatch4.0-
OR
vmwareesxiMatch4.0

References

Related

seebug 7
exploitpack 3
nessus 22
cvelist 1
ubuntucve 1
openvas 29
veracode 1
suse 1
prion 1
cve 1
exploitdb 3
oraclelinux 4
redhat 5
centos 3
canvas 1
securityvulns 2
osv 1
debian 1
vmware 3
ubuntu 1
seebug
seebug
Linux Kernel &lt; 2.6.19 udp_sendmsg Local Root Exploit
2009-09-03 00:00:00
Linux Kernel &lt; 2.6.19 udp_sendmsg Local Root Exploit (x86/x64)
2009-09-03 00:00:00
Linux Kernel < 2.6.19 - udp_sendmsg Local Root Exploit (x86/x64)
2014-07-01 00:00:00
exploitpack
exploitpack
Linux Kernel 2.6.19 (Debian 4) - udp_sendmsg Local Privilege Escalation (3)
2009-09-02 00:00:00
Linux Kernel 2.6 2.6.19 (White Box 4 CentOS 4.44.5 Fedora Core 456 x86) - ip_append_data() Ring0 Privilege Escalation (1)
2009-08-31 00:00:00
Linux Kernel 2.6.19 (x86x64) - udp_sendmsg Local Privilege Escalation (2)
2009-09-02 00:00:00
nessus
nessus
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6460)
2012-05-17 00:00:00
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6453)
2009-09-24 00:00:00
SuSE9 Security Update : Linux kernel (YOU Patch Number 12487)
2009-09-24 00:00:00
cvelist
cvelist
CVE-2009-2698
2009-08-27 17:00:00
ubuntucve
ubuntucve
CVE-2009-2698
2009-08-27 00:00:00
openvas
openvas
SLES9: Security update for Linux kernel
2009-10-10 00:00:00
SLES9: Security update for Linux kernel
2009-10-10 00:00:00
SLES10: Security update for Linux kernel
2009-10-13 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:36:20
suse
suse
local privilege escalation in kernel
2009-08-28 14:29:52
prion
prion
Null pointer dereference
2009-08-27 17:30:00
cve
cve
CVE-2009-2698
2009-08-27 17:30:00
exploitdb
exploitdb
Linux Kernel &lt; 2.6.19 (Debian 4) - &#039;udp_sendmsg&#039; Local Privilege Escalation (3)
2009-09-02 00:00:00
Linux Kernel 2.6 &lt; 2.6.19 (White Box 4 / CentOS 4.4/4.5 / Fedora Core 4/5/6 x86) - &#039;ip_append_data()&#039; Ring0 Privilege Escalation (1)
2009-08-31 00:00:00
Linux Kernel &lt; 2.6.19 (x86/x64) - &#039;udp_sendmsg&#039; Local Privilege Escalation (2)
2009-09-02 00:00:00
oraclelinux
oraclelinux
kernel security update
2009-08-27 00:00:00
kernel security update
2009-08-24 00:00:00
kernel security and bug fix update
2009-08-24 00:00:00
redhat
redhat
(RHSA-2009:1223) Important: kernel security update
2009-08-24 00:00:00
(RHSA-2009:1233) Important: kernel security update
2009-08-27 00:00:00
(RHSA-2009:1222) Important: kernel security and bug fix update
2009-08-24 00:00:00
centos
centos
kernel security update
2009-08-28 22:30:59
kernel security update
2009-08-24 15:30:11
kernel security update
2009-08-24 19:35:59
canvas
canvas
Immunity Canvas: PROTO_OPS_NULL
2009-08-27 17:30:00
securityvulns
securityvulns
[SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities
2009-08-25 00:00:00
Linux kernel multiple security vulnerabilities
2009-08-25 00:00:00
osv
osv
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2009-08-24 00:00:00
debian
debian
[SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities
2009-08-24 18:59:41
vmware
vmware
ESX 3.5 third party update for Service Console kernel
2010-06-24 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2009-10-22 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

21.6%

JSON
Related for NVD:CVE-2009-2698
seebug7exploitpack3nessus22cvelist1ubuntucve1openvas29veracode1suse1prion1cve1exploitdb3oraclelinux4redhat5centos3canvas1securityvulns2osv1debian1vmware3ubuntu1