The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.21801
Percentile: 0.95485

CVSS Scoring

Mapped CWE(s)

• CWE-476 : NULL Pointer Dereference

Affected Products

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_desktop:10:sp2:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*
• cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:4.8:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_aus:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
• cpe:2.3:a:vmware:vcenter_server:4.0:-:*:*:*:*:*:*
• cpe:2.3:o:vmware:esxi:4.0:*:*:*:*:*:*:*

← Back to Home