CVE-2009-1185

Summary

CVECVE-2009-1185
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2009-04-17 14:30:00 UTC
Updated2023-02-13 02:19:00 UTC
Descriptionudev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

Risk And Classification

Problem Types: CWE-346

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Canonical Ubuntu Linux 6.06 All All All
Operating System Canonical Ubuntu Linux 7.10 All All All
Operating System Canonical Ubuntu Linux 8.04 All All All
Operating System Canonical Ubuntu Linux 8.10 All All All
Operating System Debian Debian Linux 4.0 All All All
Operating System Debian Debian Linux 5.0 All All All
Operating System Fedoraproject Fedora 10 All All All
Operating System Fedoraproject Fedora 9 All All All
Application Juniper Ctpview All All All All
Application Juniper Ctpview 7.1 - All All
Application Juniper Ctpview 7.1 r1 All All
Application Juniper Ctpview 7.2 - All All
Application Kernel Udev 0.0.1 All All All
Application Kernel Udev 0.0.2 All All All
Application Kernel Udev 0.0.3 All All All
Application Kernel Udev 0.0.4 All All All
Application Kernel Udev 0.0.4-1 All All All
Application Kernel Udev 0.0.5 All All All
Application Kernel Udev 0.0.5-1 All All All
Application Kernel Udev 0.0.6 All All All
Application Kernel Udev 0.0.7 All All All
Application Kernel Udev 0.0.8 All All All
Application Kernel Udev 0.0.8-1 All All All
Application Kernel Udev 0.0.9 All All All
Application Kernel Udev 0.0.9-1 All All All
Application Kernel Udev 0.1.0-1 All All All
Application Kernel Udev 0.1.1-1 All All All
Application Kernel Udev 0.1.2 All All All
Application Kernel Udev 0.1.3 All All All
Application Kernel Udev 0.1.4 All All All
Application Kernel Udev 0.1.5 All All All
Application Kernel Udev 0.1.6 All All All
Application Kernel Udev 0.1.7 All All All
Application Kernel Udev 0.1.8 All All All
Application Kernel Udev 0.1.9 All All All
Application Kernel Udev 0.2.0 All All All
Application Kernel Udev 0.2.1 All All All
Application Kernel Udev 0.2.2 All All All
Application Kernel Udev 0.2.3 All All All
Application Kernel Udev 0.2.4 All All All
Application Kernel Udev 0.2.5 All All All
Application Kernel Udev 0.2.6 All All All
Application Kernel Udev 0.2.7 All All All
Application Kernel Udev 0.2.8 All All All
Application Kernel Udev 0.2.9 All All All
Application Kernel Udev 0.3.0 All All All
Application Kernel Udev 0.3.1 All All All
Application Kernel Udev 0.3.2 All All All
Application Kernel Udev 0.3.3 All All All
Application Kernel Udev 0.3.4 All All All
Application Kernel Udev 0.3.5 All All All
Application Kernel Udev 0.3.6 All All All
Application Kernel Udev 0.3.7 All All All
Application Kernel Udev 0.3.8 All All All
Application Kernel Udev 0.3.9 All All All
Application Kernel Udev 0.4.0 All All All
Application Kernel Udev 0.4.2 All All All
Application Kernel Udev 0.4.3 All All All
Application Kernel Udev 0.4.4 All All All
Application Kernel Udev 0.4.5 All All All
Application Kernel Udev 0.4.6 All All All
Application Kernel Udev 0.4.7 All All All
Application Kernel Udev 0.4.8 All All All
Application Kernel Udev 0.4.9 All All All
Application Kernel Udev 0.5.0 All All All
Application Kernel Udev 0.5.1 All All All
Application Kernel Udev 0.5.2 All All All
Application Kernel Udev 0.5.3 All All All
Application Kernel Udev 0.5.4 All All All
Application Kernel Udev 0.5.5 All All All
Application Kernel Udev 0.5.6 All All All
Application Kernel Udev 0.5.7 All All All
Application Kernel Udev 0.5.8 All All All
Application Kernel Udev 0.5.9 All All All
Application Kernel Udev 0.6.0 All All All
Application Kernel Udev 0.6.1 All All All
Application Kernel Udev 0.6.2 All All All
Application Kernel Udev 0.6.3 All All All
Application Kernel Udev 0.6.4 All All All
Application Kernel Udev 0.6.5 All All All
Application Kernel Udev 0.6.6 All All All
Application Kernel Udev 0.6.7 All All All
Application Kernel Udev 0.6.8 All All All
Application Kernel Udev 0.6.9 All All All
Application Kernel Udev 0.7.0 All All All
Application Kernel Udev 0.7.1 All All All
Application Kernel Udev 0.7.2 All All All
Application Kernel Udev 0.7.3 All All All
Application Kernel Udev 0.7.4 All All All
Application Kernel Udev 0.7.5 All All All
Application Kernel Udev 0.7.6 All All All
Application Kernel Udev 0.7.7 All All All
Application Kernel Udev 0.7.8 All All All
Application Kernel Udev 0.7.9 All All All
Application Kernel Udev 0.8.0 All All All
Application Kernel Udev 0.8.1 All All All
Application Kernel Udev 0.8.2 All All All
Application Kernel Udev 0.8.3 All All All
Application Kernel Udev 0.8.4 All All All
Application Kernel Udev 0.8.5 All All All
Application Kernel Udev 0.8.6 All All All
Application Kernel Udev 0.8.7 All All All
Application Kernel Udev 0.8.8 All All All
Application Kernel Udev 0.8.9 All All All
Application Kernel Udev 0.9.0 All All All
Application Kernel Udev 0.9.1 All All All
Application Kernel Udev 0.9.2 All All All
Application Kernel Udev 0.9.3 All All All
Application Kernel Udev 0.9.4 All All All
Application Kernel Udev 0.9.5 All All All
Application Kernel Udev 0.9.6 All All All
Application Kernel Udev 0.9.7 All All All
Application Kernel Udev 0.9.8 All All All
Application Kernel Udev 0.9.9 All All All
Application Kernel Udev 1.0.0 All All All
Application Kernel Udev 1.0.1 All All All
Application Kernel Udev 1.0.2 All All All
Application Kernel Udev 1.0.3 All All All
Application Kernel Udev 1.0.4 All All All
Application Kernel Udev 1.0.5 All All All
Application Kernel Udev 1.0.6 All All All
Application Kernel Udev 1.0.7 All All All
Application Kernel Udev 1.0.8 All All All
Application Kernel Udev 1.0.9 All All All
Application Kernel Udev 1.1.0 All All All
Application Kernel Udev 1.1.1 All All All
Application Kernel Udev 1.1.2 All All All
Application Kernel Udev 1.1.3 All All All
Application Kernel Udev 1.1.4 All All All
Application Kernel Udev 1.1.5 All All All
Application Kernel Udev 1.1.6 All All All
Application Kernel Udev 1.1.7 All All All
Application Kernel Udev 1.1.8 All All All
Application Kernel Udev 1.1.9 All All All
Application Kernel Udev 1.2.0 All All All
Application Kernel Udev 1.2.1 All All All
Application Kernel Udev 1.2.2 All All All
Application Kernel Udev 1.2.3 All All All
Application Kernel Udev 1.2.4 All All All
Application Kernel Udev 1.2.5 All All All
Application Kernel Udev 1.2.6 All All All
Application Kernel Udev 1.2.7 All All All
Application Kernel Udev 1.2.8 All All All
Application Kernel Udev 1.2.9 All All All
Application Kernel Udev 1.3.0 All All All
Application Kernel Udev 1.3.1 All All All
Application Kernel Udev 1.3.2 All All All
Application Kernel Udev 1.3.3 All All All
Application Kernel Udev 1.3.4 All All All
Application Kernel Udev 1.3.5 All All All
Application Kernel Udev 1.3.6 All All All
Application Kernel Udev 1.3.7 All All All
Application Kernel Udev 1.3.8 All All All
Application Kernel Udev 1.3.9 All All All
Application Kernel Udev 0.0.1 All All All
Application Kernel Udev 0.0.2 All All All
Application Kernel Udev 0.0.3 All All All
Application Kernel Udev 0.0.4 All All All
Application Kernel Udev 0.0.4-1 All All All
Application Kernel Udev 0.0.5 All All All
Application Kernel Udev 0.0.5-1 All All All
Application Kernel Udev 0.0.6 All All All
Application Kernel Udev 0.0.7 All All All
Application Kernel Udev 0.0.8 All All All
Application Kernel Udev 0.0.8-1 All All All
Application Kernel Udev 0.0.9 All All All
Application Kernel Udev 0.0.9-1 All All All
Application Kernel Udev 0.1.0-1 All All All
Application Kernel Udev 0.1.1-1 All All All
Application Kernel Udev 0.1.2 All All All
Application Kernel Udev 0.1.3 All All All
Application Kernel Udev 0.1.4 All All All
Application Kernel Udev 0.1.5 All All All
Application Kernel Udev 0.1.6 All All All
Application Kernel Udev 0.1.7 All All All
Application Kernel Udev 0.1.8 All All All
Application Kernel Udev 0.1.9 All All All
Application Kernel Udev 0.2.0 All All All
Application Kernel Udev 0.2.1 All All All
Application Kernel Udev 0.2.2 All All All
Application Kernel Udev 0.2.3 All All All
Application Kernel Udev 0.2.4 All All All
Application Kernel Udev 0.2.5 All All All
Application Kernel Udev 0.2.6 All All All
Application Kernel Udev 0.2.7 All All All
Application Kernel Udev 0.2.8 All All All
Application Kernel Udev 0.2.9 All All All
Application Kernel Udev 0.3.0 All All All
Application Kernel Udev 0.3.1 All All All
Application Kernel Udev 0.3.2 All All All
Application Kernel Udev 0.3.3 All All All
Application Kernel Udev 0.3.4 All All All
Application Kernel Udev 0.3.5 All All All
Application Kernel Udev 0.3.6 All All All
Application Kernel Udev 0.3.7 All All All
Application Kernel Udev 0.3.8 All All All
Application Kernel Udev 0.3.9 All All All
Application Kernel Udev 0.4.0 All All All
Application Kernel Udev 0.4.2 All All All
Application Kernel Udev 0.4.3 All All All
Application Kernel Udev 0.4.4 All All All
Application Kernel Udev 0.4.5 All All All
Application Kernel Udev 0.4.6 All All All
Application Kernel Udev 0.4.7 All All All
Application Kernel Udev 0.4.8 All All All
Application Kernel Udev 0.4.9 All All All
Application Kernel Udev 0.5.0 All All All
Application Kernel Udev 0.5.1 All All All
Application Kernel Udev 0.5.2 All All All
Application Kernel Udev 0.5.3 All All All
Application Kernel Udev 0.5.4 All All All
Application Kernel Udev 0.5.5 All All All
Application Kernel Udev 0.5.6 All All All
Application Kernel Udev 0.5.7 All All All
Application Kernel Udev 0.5.8 All All All
Application Kernel Udev 0.5.9 All All All
Application Kernel Udev 0.6.0 All All All
Application Kernel Udev 0.6.1 All All All
Application Kernel Udev 0.6.2 All All All
Application Kernel Udev 0.6.3 All All All
Application Kernel Udev 0.6.4 All All All
Application Kernel Udev 0.6.5 All All All
Application Kernel Udev 0.6.6 All All All
Application Kernel Udev 0.6.7 All All All
Application Kernel Udev 0.6.8 All All All
Application Kernel Udev 0.6.9 All All All
Application Kernel Udev 0.7.0 All All All
Application Kernel Udev 0.7.1 All All All
Application Kernel Udev 0.7.2 All All All
Application Kernel Udev 0.7.3 All All All
Application Kernel Udev 0.7.4 All All All
Application Kernel Udev 0.7.5 All All All
Application Kernel Udev 0.7.6 All All All
Application Kernel Udev 0.7.7 All All All
Application Kernel Udev 0.7.8 All All All
Application Kernel Udev 0.7.9 All All All
Application Kernel Udev 0.8.0 All All All
Application Kernel Udev 0.8.1 All All All
Application Kernel Udev 0.8.2 All All All
Application Kernel Udev 0.8.3 All All All
Application Kernel Udev 0.8.4 All All All
Application Kernel Udev 0.8.5 All All All
Application Kernel Udev 0.8.6 All All All
Application Kernel Udev 0.8.7 All All All
Application Kernel Udev 0.8.8 All All All
Application Kernel Udev 0.8.9 All All All
Application Kernel Udev 0.9.0 All All All
Application Kernel Udev 0.9.1 All All All
Application Kernel Udev 0.9.2 All All All
Application Kernel Udev 0.9.3 All All All
Application Kernel Udev 0.9.4 All All All
Application Kernel Udev 0.9.5 All All All
Application Kernel Udev 0.9.6 All All All
Application Kernel Udev 0.9.7 All All All
Application Kernel Udev 0.9.8 All All All
Application Kernel Udev 0.9.9 All All All
Application Kernel Udev 1.0.0 All All All
Application Kernel Udev 1.0.1 All All All
Application Kernel Udev 1.0.2 All All All
Application Kernel Udev 1.0.3 All All All
Application Kernel Udev 1.0.4 All All All
Application Kernel Udev 1.0.5 All All All
Application Kernel Udev 1.0.6 All All All
Application Kernel Udev 1.0.7 All All All
Application Kernel Udev 1.0.8 All All All
Application Kernel Udev 1.0.9 All All All
Application Kernel Udev 1.1.0 All All All
Application Kernel Udev 1.1.1 All All All
Application Kernel Udev 1.1.2 All All All
Application Kernel Udev 1.1.3 All All All
Application Kernel Udev 1.1.4 All All All
Application Kernel Udev 1.1.5 All All All
Application Kernel Udev 1.1.6 All All All
Application Kernel Udev 1.1.7 All All All
Application Kernel Udev 1.1.8 All All All
Application Kernel Udev 1.1.9 All All All
Application Kernel Udev 1.2.0 All All All
Application Kernel Udev 1.2.1 All All All
Application Kernel Udev 1.2.2 All All All
Application Kernel Udev 1.2.3 All All All
Application Kernel Udev 1.2.4 All All All
Application Kernel Udev 1.2.5 All All All
Application Kernel Udev 1.2.6 All All All
Application Kernel Udev 1.2.7 All All All
Application Kernel Udev 1.2.8 All All All
Application Kernel Udev 1.2.9 All All All
Application Kernel Udev 1.3.0 All All All
Application Kernel Udev 1.3.1 All All All
Application Kernel Udev 1.3.2 All All All
Application Kernel Udev 1.3.3 All All All
Application Kernel Udev 1.3.4 All All All
Application Kernel Udev 1.3.5 All All All
Application Kernel Udev 1.3.6 All All All
Application Kernel Udev 1.3.7 All All All
Application Kernel Udev 1.3.8 All All All
Application Kernel Udev 1.3.9 All All All
Application Kernel Udev All All All All
Operating System Opensuse Opensuse 10.3 All All All
Operating System Opensuse Opensuse 11.0 All All All
Operating System Opensuse Opensuse 11.1 All All All
Application Suse Linux Enterprise Debuginfo 10 sp2 All All
Application Suse Linux Enterprise Debuginfo 11 - All All
Operating System Suse Linux Enterprise Desktop 10 sp2 All All
Operating System Suse Linux Enterprise Desktop 11 - All All
Operating System Suse Linux Enterprise Server 10 sp2 All All
Operating System Suse Linux Enterprise Server 11 - All All
Application Udev Project Udev All All All All

References

ReferenceSourceLinkTags
VMware ESX Server update for udev, sudo, and curl - Secunia Advisories - Vulnerability Information - Secunia.com SECUNIA secunia.com
Debian update for udev - Secunia Advisories - Vulnerability Information - Secunia.com SECUNIA secunia.com Vendor Advisory
SUSE update for udev - Secunia.com SECUNIA secunia.com
udev Denial of Service and Privilege Escalation - Secunia Advisories - Vulnerability Information - Secunia.com SECUNIA secunia.com Vendor Advisory
udev Netlink Message Validation Local Privilege Escalation Vulnerability BID www.securityfocus.com Patch
hotplug/udev.git - udev development tree CONFIRM git.kernel.org Vendor Advisory
[SECURITY] Fedora 10 Update: udev-127-5.fc10 FEDORA www.redhat.com
hotplug/udev.git - udev development tree MISC git.kernel.org
udev NETLINK Message Validation Error Lets Local Users Gain Elevated Privileges - SecurityTracker SECTRACK www.securitytracker.com
Advisories:rPSA-2009-0063 - rPath Wiki CONFIRM wiki.rpath.com
Debian -- Security Information -- DSA-1772-1 udev DEBIAN www.debian.org Patch
rPath update for udev - Secunia.com SECUNIA secunia.com
CVE-2009-1185 MISC launchpad.net
Red Hat Customer Portal MISC access.redhat.com
hotplug/udev.git - udev development tree MISC git.kernel.org
hotplug/udev.git - udev development tree CONFIRM git.kernel.org Vendor Advisory
Bug 495051 – CVE-2009-1185 udev: Uncheck origin of NETLINK messages CONFIRM bugzilla.redhat.com Vendor Advisory
Linux Kernel 2.6 UDEV < 141 Local Privilege Escalation Exploit EXPLOIT-DB www.exploit-db.com
[SECURITY] Fedora 9 Update: udev-124-4.fc9 FEDORA www.redhat.com
Support REDHAT www.redhat.com
Support / Security / Advisories / / MDVSA-2009:104 | Mandriva MANDRIVA www.mandriva.com
USN-758-1: udev vulnerabilities | Ubuntu UBUNTU www.ubuntu.com
SecurityFocus BUGTRAQ www.securityfocus.com
SecurityFocus BUGTRAQ www.securityfocus.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH VUPEN www.vupen.com
Slackware update for udev - Secunia.com SECUNIA secunia.com
Ubuntu update for udev - Secunia Advisories - Vulnerability Information - Secunia.com SECUNIA secunia.com Vendor Advisory
Advisories:rPSA-2009-0063 - rPath Wiki MISC wiki.rpath.com
access.redhat.com | CVE-2009-1185 MISC access.redhat.com
Gentoo Linux Documentation -- udev: Multiple vulnerabilities GENTOO www.gentoo.org
Gentoo update for udev - Secunia Advisories - Vulnerability Information - Secunia.com SECUNIA secunia.com
VMSA-2009-0009 CONFIRM www.vmware.com
Repository / Oval Repository OVAL oval.cisecurity.org
[security-announce] SUSE Security Announcement: udev local privilege esc SUSE lists.opensuse.org
The Slackware Linux Project: Slackware Security Advisories SLACKWARE slackware.com
[security-announce] SUSE Security Announcement: udev local root exploit SUSE lists.opensuse.org
[Security-announce] VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl MLIST lists.vmware.com
Support / Security / Advisories / / MDVSA-2009:103 | Mandriva MANDRIVA www.mandriva.com
Webmail - OVH VUPEN www.vupen.com
Fedora update for udev - Secunia.com SECUNIA secunia.com
Juniper Networks - 2015-10 Security Bulletin: CTPView: Multiple Vulnerabilities in CTPView CONFIRM kb.juniper.net
2015-07 Security Bulletin: CTPView: Multiple vulnerabilities in CTPView - Juniper Networks CONFIRM kb.juniper.net
Repository / Oval Repository OVAL oval.cisecurity.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

OrganizationPublishedContributorStatement
Red Hat2009-04-20Tomas HogerThis issue has been fixed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2009-0427.html . udev packages as shipped in Red Hat Enterprise Linux 4 were not affected by this flaw, as they do not use netlink sockets for communication. udev is not shipped in Red Hat Enterprise Linux 2.1 and 3.
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report