CVE-2009-1186

Udev < 141 - Buffer Overflow

Title source: rule
STIX 2.1

Description

Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments.

References (25)

Core 25
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/502752/100/0/threaded
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34801
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022068
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=495052
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1772
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml
Third Party Advisory x_refsource_misc
https://launchpad.net/bugs/cve/2009-1186
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:103
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34776
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34731
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34753
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34785
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34787
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34539
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1053
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-758-1
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34771
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34750
Broken Link x_refsource_confirm
http://wiki.rpath.com/Advisories:rPSA-2009-0063

Scores

EPSS 0.0009
EPSS Percentile 24.7%

Details

CWE
CWE-120
Status published
Products (18)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 7.10
canonical/ubuntu_linux 8.04
canonical/ubuntu_linux 8.10
debian/debian_linux 4.0
debian/debian_linux 5.0
fedoraproject/fedora 9
fedoraproject/fedora 10
opensuse/opensuse 10.3
opensuse/opensuse 11.0
... and 8 more
Published Apr 17, 2009
Tracked Since Feb 18, 2026