CVE-2009-1186

Опубликовано: 17 апр. 2009

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments.

Ссылки

http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/34731
Not Applicable
http://secunia.com/advisories/34750
Not Applicable
http://secunia.com/advisories/34753
Not Applicable
http://secunia.com/advisories/34771
Not Applicable
http://secunia.com/advisories/34776
Not Applicable
http://secunia.com/advisories/34785
Not Applicable
http://secunia.com/advisories/34787
Not Applicable
http://secunia.com/advisories/34801
Not Applicable
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399
Third Party Advisory
http://wiki.rpath.com/Advisories:rPSA-2009-0063
Broken Link
http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063
Broken Link
http://www.debian.org/security/2009/dsa-1772
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:103
Broken Link
http://www.securityfocus.com/archive/1/502752/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/34539
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022068
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-758-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:udev_project:udev:*:*:*:*:*:*:*:*

Версия до 141 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:suse:linux_enterprise_debuginfo:10:sp2:*:*:*:*:*:*

cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:11:-:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00087

Низкий

2.1 Low

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2009-1186

ubuntu

больше 16 лет назад

CVE-2009-1186

redhat

больше 16 лет назад

CVE-2009-1186

debian

больше 16 лет назад

Buffer overflow in the util_path_encode function in udev/lib/libudev-u ...

GHSA-m6q5-8596-f8v2

github

больше 3 лет назад

BDU:2015-04386

fstec

почти 11 лет назад

Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 25%

0.00087

Низкий

2.1 Low

CVSS2

Дефекты

CWE-120