The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-largesmp-develUpgrade kernel-smp-develUpgrade kernelUpgrade kernel-smpUpgrade kernel-PAE-develUpgrade kernel-largesmpUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-xenUUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-xenU-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen | Dec 1, 2016 | Aug 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 27, 2009 |
| Suse | — | Upgrade um-host-install-initrdUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-s390x-debugUpgrade kernel-pseries64Upgrade kernel-s390Upgrade kernel-pmac64Upgrade kernel-s390-debugUpgrade kernel-xenpaeUpgrade kernel-sn2Upgrade kernel-umUpgrade kernel-smpUpgrade kernel-iseries64Upgrade kernel-s390xUpgrade kernel-64k-pagesizeUpgrade kernel-symsUpgrade um-host-kernelUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-xen | Feb 17, 2015 | Aug 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.27-15-server | Nov 8, 2024 | Aug 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 27, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub