Skip to content
OpenAdvisories
Unscored DSA-1772-1 2 CVEs

udev - privilege escalation

Published Apr 16, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 udev 0.105-4etch1
Debian · 5.0 udev 0.125-7+lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2009-1185 Public exploit EPSS 81%

    udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to g…

  • Unscored —

    Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to …