CVE-2009-1185

Name of the Vulnerable Software and Affected Versions udev versions prior to 1.4.1 libudev0-128 libudev-devel-128 libvolume-id0 libvolume id-095-14.20.el5 3 libvolume id-devel-095 libvolume id1-128 libvolume-id-dev udev-095 udev-128 udev-debuginfo-128 udev-debuginfo-085 udev-debugsource-128 udev-udeb

Description The issue concerns multiple vulnerabilities in the udev package and related libraries, which can lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally, allowing local users to gain privileges by sending a NETLINK message from user space. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For udev versions prior to 1.4.1, update to version 1.4.1 or later. For libudev0-128, libudev-devel-128, libvolume-id0, libvolume id-095-14.20.el5 3, libvolume id-devel-095, libvolume id1-128, libvolume-id-dev, udev-095, udev-128, udev-debuginfo-128, udev-debuginfo-085, udev-debugsource-128, and udev-udeb, at the moment, there is no information about a newer version that contains a fix for this vulnerability.