Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2009-1185

udev: Uncheck origin of NETLINK messages

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

CVSS 2.0 · 7.2 High EPSS 80.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 7 more
CVE-2009-1186

udev: Buffer overflow in path encoding routine

Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2010-4176

dracut: /dev/systty permissions could allow remote users to snoop on local users

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.

CVSS 2.0 · 4.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Dracut Project Fedoraproject Udev Project
Products
Dracut Fedora Udev
CVE-2011-0640

udev: Arbitrary code execution via crafted USB data, from smartphone connected to the system

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Udev Project
Products
Udev