CVE-2009-1186

Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments.

• CWE-120

• http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/34731Not Applicable
• http://secunia.com/advisories/34750Not Applicable
• http://secunia.com/advisories/34753Not Applicable
• http://secunia.com/advisories/34771Not Applicable
• http://secunia.com/advisories/34776Not Applicable
• http://secunia.com/advisories/34785Not Applicable
• http://secunia.com/advisories/34787Not Applicable
• http://secunia.com/advisories/34801Not Applicable
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399Third Party Advisory
• http://wiki.rpath.com/Advisories:rPSA-2009-0063Broken Link
• http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063Broken Link
• http://www.debian.org/security/2009/dsa-1772Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200904-18.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:103Broken Link
• http://www.securityfocus.com/archive/1/502752/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/34539Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022068Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-758-1Third Party Advisory
• http://www.vupen.com/english/advisories/2009/1053Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=495052Issue Tracking, Patch, Third Party Advisory
• https://launchpad.net/bugs/cve/2009-1186Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.htmlMailing List, Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.htmlMailing List, Third Party Advisory
• http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/34731Not Applicable
• http://secunia.com/advisories/34750Not Applicable
• http://secunia.com/advisories/34753Not Applicable
• http://secunia.com/advisories/34771Not Applicable
• http://secunia.com/advisories/34776Not Applicable
• http://secunia.com/advisories/34785Not Applicable
• http://secunia.com/advisories/34787Not Applicable
• http://secunia.com/advisories/34801Not Applicable
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399Third Party Advisory
• http://wiki.rpath.com/Advisories:rPSA-2009-0063Broken Link
• http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063Broken Link
• http://www.debian.org/security/2009/dsa-1772Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200904-18.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:103Broken Link
• http://www.securityfocus.com/archive/1/502752/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/34539Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022068Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-758-1Third Party Advisory
• http://www.vupen.com/english/advisories/2009/1053Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=495052Issue Tracking, Patch, Third Party Advisory
• https://launchpad.net/bugs/cve/2009-1186Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.htmlMailing List, Third Party Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.htmlMailing List, Third Party Advisory

Published

Apr 17, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1180The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an…
• CVE-2009-1181The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 an…
• CVE-2009-1182Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3…
• CVE-2009-1183The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.…
• CVE-2009-1184The selinux_ip_postroute_iptables_compat function in securit…
• CVE-2009-1185udev before 1.4.1 does not verify whether a NETLINK message …
• CVE-2009-1187Integer overflow in the JBIG2 decoding feature in Poppler be…
• CVE-2009-1188Integer overflow in the JBIG2 decoding feature in the Splash…
• CVE-2009-1189The _dbus_validate_signature_with_reason function (dbus-mars…
• CVE-2009-1190Algorithmic complexity vulnerability in the java.util.regex.…
• CVE-2009-1191mod_proxy_ajp.c in the mod_proxy_ajp module in the Apache HT…
• CVE-2009-1192The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pag…