CVE-2009-1185

highPriorität · beachten · 67OT-Risiko · hochEPSS 0.805 · 100. PerzentilExploit · waffenfähigEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

6 exploits · waffenfähig

Likely / severe?

80.5% (100th) EPSS

CVSS 7.2 · high

Is it mine?

70 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

enisa_euvd · fstec_bdu · nvd · redhat_csaf

EPSS · bewertet 2026-10-22

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenlibvolume_id-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.s390 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.s390 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenlibvolume_id-devel-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.ppc as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.s390 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.s390x as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427
Behobenudev-debuginfo-0:095-14.20.el5_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0427

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.2

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:C/E:Hsecondary · CVSS-BT (t0sche)

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Csecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-346USprimärCWE-346USCWE-862US

Exploits (6)

Öffentlicher Proof-of-Concept- und Exploit-Code.

exploit/linux/local/udev_netlinkLinux udev Netlink Local Privilege Escalationwaffenfähig · metasploit
EDB-21848Linux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)funktional · exploit_db
EDB-8478Linux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)funktional · exploit_db
EDB-8572Linux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)funktional · exploit_db
0b0111100/2009Linux Kernel Exploits -> CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547PoC · poc_in_github
aish19siddiqua-commits/mtechweek_04Metasploit-based penetration test on an isolated Metasploitable2 lab VM — remote exploitation via DistCC (CVE-2004-2687), privilege escalation via udev netlink (CVE-2009-1185), and vsftpd 2.3.4 backdoor analysis (CVE-2011-2523), with firewall mitigation validated end-to-end.PoC · poc_in_github

betroffene Produkte (70)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
Novell Inc. SUSE Linux Enterprise≤ Server 11fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Server 10 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Desktop 10 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise≤ Desktop 11fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Desktop Workstation 5fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Server 5.3.zfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Desktop 5fstec_bduRU
The CentOS Project CentOS≤ 5fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 4fstec_bduRU
canonical ubuntu linux= 6.06nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 7.10nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 8.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 8.10nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
debian debian linux= 4.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
debian debian linux= 5.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
fedoraproject fedora= 10nvdUScpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
fedoraproject fedora= 9nvdUScpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
juniper ctpview< 7.1nvdUScpe:2.3:a:juniper:ctpview:*:*:*:*:*:*:*:*
juniper ctpview= 7.1nvdUScpe:2.3:a:juniper:ctpview:*:*:*:*:*:*:*:*

20 von 70 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2009:0427Red Hat Security Advisory: udev security update2009-04-16csaf · redhat_csafUS
Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd fstec_bdu nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2009-04-17geändert 2026-06-16

verwandt (913)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-34291US	high8.8OT kritisch	92.8% (100th)	KEV	2025-12-05
Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_…
CVE-2015-4495US	high8.8OT kritisch	68.6% (99th)	KEV	2015-08-08
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitr…
CVE-2024-23898US	high8.8	67.2% (99th)	Exploit	2024-01-24
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, r…
CVE-2023-29711US	critical9.8	70.3% (99th)	—	2023-06-22
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request.
CVE-2020-16952US	medium6.8	71.1% (99th)	Exploit	2020-10-16
<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully e…

+908 weitere

Referenzen (78)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan