AndroidVulnerabilities.org

exploid udev

(json)

• CVE numbers: CVE-2009-1185 [citation-needed]
• Coordinated disclosure?: false
• Categories: kernel
• Details: udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. [CVE-2009-1185]
• Discovered by: Sebastian ??? [c-skills-android-trickery][archived] on: 2010-07-15 [c-skills-android-trickery][archived]
• Reported on: 2010-07-15 [c-skills-android-trickery][archived]
• Fixed on: 2011-04-18 [netd-udev-fix]
• Fix released on: 2011-07-25 [sprint-2.3.5-release#0][sprint-2.3.5-release#1]
• Affected versions: 1.0-2.3.4 [citation-needed] regex: (1.[0-9].[0-9])|(2.(([0-2].[0-9])|(3.[0-4])))
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.3.5_r1 [netd-udev-fix]
• Submission: by: Daniel R. Thomas, on: 2013-09-04