The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-docUpgrade kernel-xenU-develUpgrade kernel-xenUUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-headersUpgrade kernelUpgrade kernel-smpUpgrade kernel-largesmpUpgrade kernel-PAE-develUpgrade kernel-largesmp-develUpgrade kernel-smp-devel | Dec 1, 2016 | Aug 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 27, 2009 |
| Suse | — | Upgrade kernel-smpUpgrade kernel-s390-debugUpgrade kernel-sn2Upgrade kernel-kdumpUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade um-host-install-initrdUpgrade kernel-s390x-debugUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-s390Upgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-s390xUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-64k-pagesizeUpgrade um-host-kernelUpgrade kernel-source | Feb 17, 2015 | Aug 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64-smp | Nov 8, 2024 | Aug 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 27, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub