Red Hat Security AdvisoryRHSA-2009:0427
udev security update
Released 2009-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libvolume_id-095-14.20.el5_3, libvolume_id-095-14.20.el5_3.i386, libvolume_id-095-14.20.el5_3.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) libvolume_id-095-14.20.el5_3, libvolume_id-095-14.20.el5_3.i386, udev-095-14.20.el5_3 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libvolume_id-devel-095-14.20.el5_3, libvolume_id-devel-095-14.20.el5_3.i386, udev-095-14.20.el5_3
Fixes 1 record
Priority HIGH 72
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.8055 · Published 2009-04-17 · Fixed CWE-346
