NetSight
IP …
high7.8Public exploit code

CVE-2009-2698

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain pr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 2.6.19
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04
SuseLinux Enterprise Desktop
Version 10
SuseLinux Enterprise Server
Versions 9, 10
FedoraprojectFedora
Version 10
RedhatEnterprise Linux Desktop
Versions 4.0, 5.0
RedhatEnterprise Linux Eus
Versions 4.8, 5.3
RedhatEnterprise Linux Server
Versions 4.0, 5.0
RedhatEnterprise Linux Server Aus
Version 5.3
RedhatEnterprise Linux Workstation
Versions 4.0, 5.0
VmwareVcenter Server
Version 4.0
VmwareEsxi
Version 4.0

Weakness classification

CWE-476

References