CVE-2009-2698

EPSS 7.2%

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Affected products

n/a · n/a

public PoCs found — 4

githubgithub.com/xiaoxiaoleo/CVE-2009-2698★ 29 exploitdbwww.exploit-db.com/exploits/9575unverified exploitdbwww.exploit-db.com/exploits/9574unverified exploitdbwww.exploit-db.com/exploits/9542unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46 http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html http://rhn.redhat.com/errata/RHSA-2009-1222.html http://rhn.redhat.com/errata/RHSA-2009-1223.html https://bugzilla.redhat.com/show_bug.cgi?id=518034 http://secunia.com/advisories/23073 http://secunia.com/advisories/36430 http://secunia.com/advisories/36510 http://secunia.com/advisories/37105 http://secunia.com/advisories/37298 http://secunia.com/advisories/37471 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514