CVE-2009-1185
UnknownEPSS 81.53%
Last modified
CVE-2009-1185 is a vulnerability of currently unknown severity. udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.. EPSS estimates a 81.53% chance of exploitation in the next 30 days.
Description
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Udev Project | Udev | < 141 | — |
| Suse | Linux Enterprise Debuginfo | 10 | Sp2 |
| Suse | Linux Enterprise Debuginfo | 11 | — |
| Opensuse | Opensuse | 10.3 | — |
| Opensuse | Opensuse | 11.0 | — |
| Opensuse | Opensuse | 11.1 | — |
| Suse | Linux Enterprise Desktop | 10 | Sp2 |
| Suse | Linux Enterprise Desktop | 11 | — |
| Suse | Linux Enterprise Server | 10 | Sp2 |
| Suse | Linux Enterprise Server | 11 | — |
| Debian | Debian Linux | 4.0 | — |
| Debian | Debian Linux | 5.0 | — |
| Canonical | Ubuntu Linux | 6.06 | — |
| Canonical | Ubuntu Linux | 7.10 | — |
| Canonical | Ubuntu Linux | 8.04 | — |
| Canonical | Ubuntu Linux | 8.10 | — |
| Fedoraproject | Fedora | 9 | — |
| Fedoraproject | Fedora | 10 | — |
| Juniper | Ctpview | < 7.1 | — |
| Juniper | Ctpview | 7.1 | — |
| Juniper | Ctpview | 7.2 | — |
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691Third Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.htmlMailing List, Third Party Advisory
- http://lists.vmware.com/pipermail/security-announce/2009/000060.htmlThird Party Advisory
- http://secunia.com/advisories/34731Not Applicable
- http://secunia.com/advisories/34750Not Applicable
- http://secunia.com/advisories/34753Not Applicable
- http://secunia.com/advisories/34771Not Applicable
- http://secunia.com/advisories/34776Not Applicable
- http://secunia.com/advisories/34785Not Applicable
- http://secunia.com/advisories/34787Not Applicable
- http://secunia.com/advisories/34801Not Applicable
- http://secunia.com/advisories/35766Not Applicable
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399Mailing List, Third Party Advisory
- http://www.debian.org/security/2009/dsa-1772Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200904-18.xmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0427.htmlThird Party Advisory
- http://www.securityfocus.com/archive/1/502752/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/504849/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/34536Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022067Broken Link, Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-758-1Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0009.htmlThird Party Advisory
- http://www.vupen.com/english/advisories/2009/1053Permissions Required
- http://www.vupen.com/english/advisories/2009/1865Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=495051Issue Tracking, Patch, Third Party Advisory
- https://launchpad.net/bugs/cve/2009-1185Issue Tracking, Third Party Advisory
- https://www.exploit-db.com/exploits/8572Exploit, Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.htmlMailing List, Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.htmlMailing List, Third Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691Third Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.htmlMailing List, Third Party Advisory
- http://lists.vmware.com/pipermail/security-announce/2009/000060.htmlThird Party Advisory
- http://secunia.com/advisories/34731Not Applicable
- http://secunia.com/advisories/34750Not Applicable
- http://secunia.com/advisories/34753Not Applicable
- http://secunia.com/advisories/34771Not Applicable
- http://secunia.com/advisories/34776Not Applicable
- http://secunia.com/advisories/34785Not Applicable
- http://secunia.com/advisories/34787Not Applicable
- http://secunia.com/advisories/34801Not Applicable
- http://secunia.com/advisories/35766Not Applicable
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399Mailing List, Third Party Advisory
- http://www.debian.org/security/2009/dsa-1772Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200904-18.xmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-0427.htmlThird Party Advisory
- http://www.securityfocus.com/archive/1/502752/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/504849/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/34536Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022067Broken Link, Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-758-1Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0009.htmlThird Party Advisory
- http://www.vupen.com/english/advisories/2009/1053Permissions Required
- http://www.vupen.com/english/advisories/2009/1865Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=495051Issue Tracking, Patch, Third Party Advisory
- https://launchpad.net/bugs/cve/2009-1185Issue Tracking, Third Party Advisory
- https://www.exploit-db.com/exploits/8572Exploit, Third Party Advisory, VDB Entry
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.htmlMailing List, Third Party Advisory
- https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.htmlMailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-1185?
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
How severe is CVE-2009-1185?
Severity scoring for CVE-2009-1185 is pending analysis. The EPSS model estimates a 81.53% probability of exploitation in the next 30 days.
How do I fix CVE-2009-1185?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-1179Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and ea…
- CVE-2009-1180The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an…
- CVE-2009-1181The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an…
- CVE-2009-1182Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3…
- CVE-2009-1183The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.…
- CVE-2009-1184The selinux_ip_postroute_iptables_compat function in securit…
- CVE-2009-1186Buffer overflow in the util_path_encode function in udev/lib…
- CVE-2009-1187Integer overflow in the JBIG2 decoding feature in Poppler be…
- CVE-2009-1188Integer overflow in the JBIG2 decoding feature in the Splash…
- CVE-2009-1189The _dbus_validate_signature_with_reason function (dbus-mars…
- CVE-2009-1190Algorithmic complexity vulnerability in the java.util.regex.…
- CVE-2009-1191mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HT…
Are you affected by CVE-2009-1185?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST