CVE-2009-1185: canonical ubuntu_linux Origin Validation Error

CVSS: 7.2v2.0HighModified

AliasesRHSA-2009:0427CGA-mvfh-hx2x-4fgjCGA-wcrj-82cx-c73x+2 more

Published 17-04-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-1185 is a high (CVSS 7.2) Origin Validation Error vulnerability in canonical ubuntu_linux. EPSS estimates a 80.55% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk

55/100

0100

High · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v2.0 (NVD)

EPSS score

80.55%

0%100%

Critical · -0.98 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits4exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

DSA-1772-1 CGA-8X8F-MFJG-V9CJ

Timeline

17-04-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

CVSS metrics

1 score · 1 source · 1 version

v2.07.2

EPSS trend

Probability

80.55%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

-0.98 pp

From 81.53% on 19-09-2026

19-09-202619-10-2026

EPSS score

80.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

exploit-databaselocallinuxVerified
Linux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)
Maturity: weaponized
exploit-databaselocallinuxVerified
Linux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)
Maturity: weaponized
exploit-databaselocallinuxVerified
Linux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)
Maturity: weaponized

Show all 4 exploits

MetasploitremoteVerified
Linux udev Netlink Local Privilege Escalation
exploit/linux/local/udev_netlink
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-346Origin Validation ErrorThe product does not properly verify that the source of data or communication is valid.

Affected systems

Redhat4 products

libvolume_id< 0:095-14.20.el5_3
libvolume_id-devel< 0:095-14.20.el5_3
udev< 0:095-14.20.el5_3
udev-debuginfo< 0:095-14.20.el5_3

Suse3 products

Chainguard2 products

py3-udevAll versions (No fix recorded)
py3.14-udevAll versions (No fix recorded)

Wolfi2 products

py3-udevAll versions (No fix recorded)
py3.14-udevAll versions (No fix recorded)

Canonical1 product

ubuntu_linuxEOL6.06 | 7.10 | 8.04 | 8.10

Debian1 product

debian_linuxEOL4.0 | 5.0

Fedoraproject1 product

fedoraEOL9 | 10

Juniper1 product

ctpview< 7.1 | 7.1 | 7.1:r1 | 7.2

Opensuse1 product

opensuseEOL10.3 | 11.0 | 11.1

Udev_project1 product

udev< 141

10 vendors · 17 products

References

45 links

www.securityfocus.com/archive/1/502752/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
wiki.rpath.com/wiki/Advisories:rPSA-2009-0063X Refsource MISCBroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/34801Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/35766Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2009:104Vendor AdvisoryX Refsource MANDRIVABroken Link
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399Vendor AdvisoryX Refsource SLACKWAREMailing ListThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
www.debian.org/security/2009/dsa-1772Vendor AdvisoryX Refsource DEBIANThird Party Advisory

Show all 45 references

www.gentoo.org/security/en/glsa/glsa-200904-18.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2009/1865VDB EntryX Refsource VUPENPermissions Required
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925VDB EntrySignatureX Refsource OVALBroken Link
www.securityfocus.com/bid/34536VDB EntryX Refsource BIDThird Party Advisory
www.securitytracker.com/id?1022067VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
git.kernel.org?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2009-0427.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2009:103Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/34776Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34731Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.vmware.com/pipermail/security-announce/2009/000060.htmlMailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/34753Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34785Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/34787Third Party AdvisoryX Refsource SECUNIANot Applicable
www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
launchpad.net/bugs/cve/2009-1185X Refsource MISCIssue TrackingThird Party Advisory
www.vupen.com/english/advisories/2009/1053VDB EntryX Refsource VUPENPermissions Required
lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ubuntu.com/usn/usn-758-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
git.kernel.org?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615X Refsource CONFIRM
kb.juniper.net/InfoCenter/index?page=content&id=JSA10691X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/34771Third Party AdvisoryX Refsource SECUNIANot Applicable
kb.juniper.net/InfoCenter/index?page=content&id=JSA10705X Refsource CONFIRMThird Party Advisory
www.securityfocus.com/archive/1/504849/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/34750Third Party AdvisoryX Refsource SECUNIANot Applicable
wiki.rpath.com/Advisories:rPSA-2009-0063X Refsource CONFIRMBroken Link
www.vmware.com/security/advisories/VMSA-2009-0009.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=495051X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
www.exploit-db.com/exploits/8572ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2009:0427Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0427.jsonAdvisory
access.redhat.com/security/cve/CVE-2009-1185REPORT
www.cve.org/CVERecord?id=CVE-2009-1185Advisory
nvd.nist.gov/vuln/detail/CVE-2009-1185Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities