The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-smp-develUpgrade kernel-PAE-develUpgrade kernel-smpUpgrade kernel-largesmpUpgrade kernel-largesmp-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-xenU-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xenUUpgrade kernel-devel | Dec 1, 2016 | Aug 27, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Aug 27, 2009 |
| Suse | — | Upgrade um-host-install-initrdUpgrade kernel-sn2Upgrade kernel-pmac64Upgrade kernel-umUpgrade kernel-bigsmpUpgrade kernel-s390x-debugUpgrade kernel-pseries64Upgrade kernel-s390Upgrade kernel-defaultUpgrade kernel-s390-debugUpgrade kernel-xenpaeUpgrade kernel-smpUpgrade kernel-kdumpUpgrade um-host-kernelUpgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-xen | Feb 17, 2015 | Aug 27, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-16-virtualUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.28-16-genericUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-25-xenUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-16-imx51Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-25-386Upgrade linux-image-2.6.24-25-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.27-15-serverUpgrade linux-image-2.6.28-16-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.28-16-iop32xUpgrade linux-image-2.6.24-25-genericUpgrade linux-image-2.6.24-25-sparc64Upgrade linux-image-2.6.24-25-itaniumUpgrade linux-image-2.6.24-25-powerpcUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.24-25-rtUpgrade linux-image-2.6.28-16-versatileUpgrade linux-image-2.6.27-15-genericUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-16-ixp4xxUpgrade linux-image-2.6.24-25-sparc64-smpUpgrade linux-image-2.6.24-25-hppa64Upgrade linux-image-2.6.27-15-virtualUpgrade linux-image-2.6.24-25-hppa32Upgrade linux-image-2.6.24-25-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-25-virtualUpgrade linux-image-2.6.24-25-serverUpgrade linux-image-2.6.24-25-mckinleyUpgrade linux-image-2.6.28-16-lpiaUpgrade linux-image-2.6.24-25-openvzUpgrade linux-image-2.6.24-25-lpiaUpgrade linux-image-2.6.24-25-lpiacompatUpgrade linux-image-2.6.15-55-server | Nov 8, 2024 | Aug 27, 2009 |
| Vmsa 2009 0016 5 Updated Service Console Package Kernel | — | Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 27, 2009 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Aug 27, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub