CVE-2009-2698observed exploitation

CVE-2009-2698

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

47Vexday Risk Score

Prioritize patching. It exploitation observed in the wild and has a public proof of concept.

ssvc Actepss 7.1%
from disclosure to weapon4 days
Published on NVDAug 27
1st PoC+4d
Observed exploitation+6010d
The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.