CVE-2009-2698

Published: Aug 27, 2009Modified: Apr 23, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Affected (20)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Suse: Linux Enterprise Desktop, Linux Enterprise Server · +3 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Suse: Linux Enterprise Desktop, Linux Enterprise Server · Fedoraproject: Fedora · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Workstation · Vmware: Esxi, Vcenter Server

1 product

1 product

2 products

Linux Enterprise Desktop

Linux Enterprise Server

Fedoraproject

1 product

Fedora

Redhat

5 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Workstation

Vmware

2 products

Esxi

Vcenter Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.19

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 10 sp2
Suse Linux Enterprise Server	Version 10 sp2
Suse Linux Enterprise Server	Version 9

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 10

Configuration E

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Eus	Version 4.8
Redhat Enterprise Linux Eus	Version 5.3
Redhat Enterprise Linux Server	Version 4.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server Aus	Version 5.3
Redhat Enterprise Linux Workstation	Version 4.0
Redhat Enterprise Linux Workstation	Version 5.0

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Vmware Esxi	Version 4.0
Vmware Vcenter Server	Version 4.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (52)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2009-1222.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2009-1223.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/23073

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/36430

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/36510

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/37105

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/37298

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/37471

Source: cve@mitre.org

Broken LinkVendor Advisory

http://support.avaya.com/css/P8/documents/100067254

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19

Source: cve@mitre.org

Broken LinkVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:051

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://www.openwall.com/lists/oss-security/2009/08/25/1

Source: cve@mitre.org

Mailing List

http://www.redhat.com/support/errata/RHSA-2009-1233.html

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/512019/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/36108

Source: cve@mitre.org

Broken LinkExploitPatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1022761

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-852-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/3316

Source: cve@mitre.org

Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=518034

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11514

Source: cve@mitre.org

Broken LinkThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8557

Source: cve@mitre.org

Broken LinkThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9142

Source: cve@mitre.org

Broken LinkThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46