The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-xenUUpgrade kernel-largesmp-develUpgrade kernel-smpUpgrade kernel-PAE-develUpgrade kernel-smp-develUpgrade kernel-largesmpUpgrade kernel | Dec 1, 2016 | Aug 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 27, 2009 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-umUpgrade kernel-xenpaeUpgrade kernel-smpUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-s390-debugUpgrade kernel-s390x-debugUpgrade kernel-s390Upgrade kernel-pmac64Upgrade kernel-kdumpUpgrade kernel-sn2Upgrade um-host-install-initrdUpgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-symsUpgrade kernel-s390xUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-64k-pagesizeUpgrade um-host-kernel | Feb 17, 2015 | Aug 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.28-16-imx51 | Nov 8, 2024 | Aug 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 27, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 27, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub