Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-819-1
HistoryAug 19, 2009 - 12:00 a.m.

Linux kernel vulnerability

2009-08-1900:00:00
ubuntu.com
54

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

16.1%

JSON

Releases

  • Ubuntu 9.04
  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 6.06

Packages

  • linux -
  • linux-source-2.6.15 -

Details

Tavis Ormandy and Julien Tinnes discovered that Linux did not correctly
initialize certain socket operation function pointers. A local attacker
could exploit this to gain root privileges. By default, Ubuntu 8.04
and later with a non-zero /proc/sys/vm/mmap_min_addr setting were not
vulnerable.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlinux-image-2.6.28-15-versatile< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchblock-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchcrypto-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchfat-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchfb-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchfirewire-core-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchfloppy-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchfs-core-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchfs-secondary-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Ubuntu9.04noarchinput-modules-2.6.28-15-generic-di< 2.6.28-15.49UNKNOWN
Rows per page:
1-10 of 2061

Related

nessus 33
securityvulns 2
openvas 63
slackware 1
seebug 4
osv 3
packetstorm 1
veracode 1
prion 1
debian 3
ubuntucve 1
checkpoint_security 1
android 1
cve 2
exploitpack 2
altlinux 1
exploitdb 2
oraclelinux 4
redhat 6
canvas 1
f5 2
centos 3
fedora 8
vmware 3
suse 1
kitploit 1
nessus
nessus
Debian DSA-1862-1 : linux-2.6 - privilege escalation
2010-02-24 00:00:00
Mandriva Linux Security Advisory : kernel (MDVSA-2009:233)
2009-09-15 00:00:00
Fedora 11 : kernel-2.6.29.6-217.2.7.fc11 (2009-8649)
2009-08-18 00:00:00
securityvulns
securityvulns
Linux kernel uninitialized pointers
2009-08-31 00:00:00
NGS000267 Technical Advisory: Symantec Messaging Gateway SSH with backdoor user account plus privilege escalation to root due to very old Kernel
2012-12-02 00:00:00
openvas
openvas
Debian Security Advisory DSA 1862-1 (linux-2.6)
2009-09-02 00:00:00
Debian Security Advisory DSA 1864-1 (linux-2.6.24)
2009-09-02 00:00:00
Mandrake Security Advisory MDVSA-2009:233 (kernel)
2009-09-21 00:00:00
slackware
slackware
kernel
2009-08-18 20:47:47
seebug
seebug
Linux Kernel 2.4/2.6 sock_sendpage() ring0 Root Exploit (simple ver)
2009-08-25 00:00:00
Linux Kernel 2.x - sock_sendpage() Local Root Exploit (Android Edition)
2014-07-01 00:00:00
Linux Kernel 2.4/2.6 - sock_sendpage() ring0 Root Exploit (Simple Version)
2014-07-01 00:00:00
osv
osv
linux-2.6.24 - privilege escalation
2009-08-16 00:00:00
linux-2.6 - privilege escalation
2009-08-14 00:00:00
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2009-08-16 00:00:00
packetstorm
packetstorm
Linux Kernel Sendpage Local Privilege Escalation
2012-07-19 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:36:00
prion
prion
Null pointer dereference
2009-08-14 15:16:00
debian
debian
[SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation
2009-08-16 16:42:51
[SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation
2009-08-14 19:31:10
[SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities
2009-08-16 20:52:35
ubuntucve
ubuntucve
CVE-2009-2692
2009-08-13 00:00:00
checkpoint_security
checkpoint_security
Check Point response to Linux NULL pointer dereference vulnerability (CVE-2009-2692)
2009-08-18 21:00:00
android
android
sock_sendpage
2009-08-13 00:00:00
cve
cve
CVE-2009-2692
2009-08-14 15:16:00
CVE-2009-2962
2009-08-21 11:02:00
exploitpack
exploitpack
Linux Kernel 2.x (Android) - sock_sendpage() Local Privilege Escalation
2009-08-18 00:00:00
Linux Kernel 2.42.6 (RedHat Linux 9 Fedora Core 4 11 Whitebox 4 CentOS 4) - sock_sendpage() Ring0 Privilege Escalation (5)
2009-08-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package kernel-image-ovz-smp version 2.6.27-alt9
2009-08-17 00:00:00
exploitdb
exploitdb
Linux Kernel 2.x (Android) - &#039;sock_sendpage()&#039; Local Privilege Escalation
2009-08-18 00:00:00
Linux Kernel 2.4/2.6 (RedHat Linux 9 / Fedora Core 4 &lt; 11 / Whitebox 4 / CentOS 4) - &#039;sock_sendpage()&#039; Ring0 Privilege Escalation (5)
2009-08-24 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2009-08-24 00:00:00
kernel security update
2009-08-27 00:00:00
kernel security update
2009-08-24 00:00:00
redhat
redhat
(RHSA-2009:1233) Important: kernel security update
2009-08-27 00:00:00
(RHSA-2009:1223) Important: kernel security update
2009-08-24 00:00:00
(RHSA-2009:1222) Important: kernel security and bug fix update
2009-08-24 00:00:00
canvas
canvas
Immunity Canvas: PROTO_OPS_NULL
2009-08-27 17:30:00
f5
f5
K10772 : Linux NULL pointer dereference vulnerability - CVE-2009-2692
2013-07-05 00:00:00
SOL10772 - Linux NULL pointer dereference vulnerability - CVE-2009-2692
2009-11-15 00:00:00
centos
centos
kernel security update
2009-08-24 19:35:59
kernel security update
2009-08-24 15:30:11
kernel security update
2009-08-28 22:30:59
fedora
fedora
[SECURITY] Fedora 11 Update: kernel-2.6.29.6-217.2.7.fc11
2009-08-15 21:45:53
[SECURITY] Fedora 11 Update: kernel-2.6.29.6-217.2.8.fc11
2009-08-17 22:00:48
[SECURITY] Fedora 10 Update: kernel-2.6.27.29-170.2.79.fc10
2009-08-15 21:45:33
vmware
vmware
ESX 3.5 third party update for Service Console kernel
2010-06-24 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
suse
suse
local privilege escalation in kernel
2009-08-20 16:02:11
kitploit
kitploit
[Linux Exploit Suggester] Grab the Linux Operating Systems release version, and return a suggestive list of possible exploits
2013-08-29 00:48:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

16.1%

JSON
Related for USN-819-1
nessus33securityvulns2openvas63slackware1seebug4osv3packetstorm1veracode1prion1debian3ubuntucve1checkpoint_security1android1cve2exploitpack2altlinux1exploitdb2oraclelinux4redhat6canvas1f52centos3fedora8vmware3suse1kitploit1