CVE-2009-1186

Published: Apr 17, 2009Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that trigger a call with crafted arguments.

Affected (18)

Products: Udev Project: Udev · Opensuse: Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server · +3 more

Show all products

Udev Project: Udev · Opensuse: Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server · Debian: Debian Linux · Canonical: Ubuntu Linux · Fedoraproject: Fedora

1 product

1 product

3 products

Linux Enterprise Debuginfo

Linux Enterprise Desktop

Linux Enterprise Server

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Udev Project Udev	Before 141

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.3
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1
Suse Linux Enterprise Debuginfo	Version 10 sp2
Suse Linux Enterprise Debuginfo	Version 11
Suse Linux Enterprise Desktop	Version 10 sp2
Suse Linux Enterprise Desktop	Version 11
Suse Linux Enterprise Server	Version 10 sp2
Suse Linux Enterprise Server	Version 11

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 10
Fedoraproject Fedora	Version 9

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (50)

http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/34731

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34750

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34753

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34771

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34776

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34785

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34787

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/34801

Source: secalert@redhat.com

Not Applicable

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399

Source: secalert@redhat.com

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2009-0063

Source: secalert@redhat.com

Broken Link

http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063

Source: secalert@redhat.com

Broken Link

http://www.debian.org/security/2009/dsa-1772

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:103

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/archive/1/502752/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/34539

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1022068

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-758-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2009/1053

Source: secalert@redhat.com

Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=495052

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://launchpad.net/bugs/cve/2009-1186

Source: secalert@redhat.com

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=662c3110803bd8c1aedacc36788e6fd028944314