The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xenU-develUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-xenUUpgrade kernel-PAE-develUpgrade kernel-smp-develUpgrade kernelUpgrade kernel-largesmpUpgrade kernel-largesmp-develUpgrade kernel-smp | Dec 1, 2016 | Aug 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 27, 2009 |
| Suse | — | Upgrade kernel-sn2Upgrade kernel-xenpaeUpgrade kernel-s390x-debugUpgrade kernel-pseries64Upgrade kernel-s390-debugUpgrade kernel-smpUpgrade kernel-umUpgrade kernel-kdumpUpgrade um-host-install-initrdUpgrade kernel-bigsmpUpgrade kernel-pmac64Upgrade kernel-s390Upgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-iseries64Upgrade kernel-s390xUpgrade kernel-sourceUpgrade um-host-kernelUpgrade kernel-64k-pagesize | Feb 17, 2015 | Aug 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-powerpc64-smp | Nov 8, 2024 | Aug 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 27, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub