USN-758-1 -- udev vulnerabilitiesID: oval:org.secpod.oval:def:700337 | Date: (C)2011-05-13 (M)2023-02-20 |
Class: PATCH | Family: unix |
Sebastian Krahmer discovered that udev did not correctly validate netlink message senders. A local attacker could send specially crafted messages to udev in order to gain root privileges. Sebastian Krahmer discovered a buffer overflow in the path encoding routines in udev. A local attacker could exploit this to crash udev, leading to a denial of service
Platform: |
Ubuntu 7.10 |
Ubuntu 8.04 |
Ubuntu 6.06 |
Ubuntu 8.10 |