漏洞描述
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691↗www.redhat.comhttp://www.redhat.com/support/errata/RHSA-2009-0427.html↗bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=495051↗www.redhat.comhttps://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html↗secunia.comhttp://secunia.com/advisories/34750↗secunia.comhttp://secunia.com/advisories/34771↗git.kernel.orghttp://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e2b362d9f23d4c63018709ab5f81a02f72b91e75↗www.securityfocus.comhttp://www.securityfocus.com/bid/34536↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html↗www.redhat.comhttps://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html↗www.ubuntu.comhttp://www.ubuntu.com/usn/usn-758-1↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:104↗launchpad.nethttps://launchpad.net/bugs/cve/2009-1185↗wiki.rpath.comhttp://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063↗lists.vmware.comhttp://lists.vmware.com/pipermail/security-announce/2009/000060.html↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:103↗kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/504849/100/0/threaded↗www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2009-0009.html↗secunia.comhttp://secunia.com/advisories/34753↗git.kernel.orghttp://git.kernel.org/?p=linux/hotplug/udev.git%3Ba=commitdiff%3Bh=e86a923d508c2aed371cdd958ce82489cf2ab615↗secunia.comhttp://secunia.com/advisories/34776↗secunia.comhttp://secunia.com/advisories/34785↗secunia.comhttp://secunia.com/advisories/34801↗www.vupen.comhttp://www.vupen.com/english/advisories/2009/1053↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/502752/100/0/threaded↗secunia.comhttp://secunia.com/advisories/35766↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10925↗www.debian.orghttp://www.debian.org/security/2009/dsa-1772↗www.securitytracker.comhttp://www.securitytracker.com/id?1022067↗slackware.comhttp://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399↗www.gentoo.orghttp://www.gentoo.org/security/en/glsa/glsa-200904-18.xml↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html↗wiki.rpath.comhttp://wiki.rpath.com/Advisories:rPSA-2009-0063↗secunia.comhttp://secunia.com/advisories/34731↗secunia.comhttp://secunia.com/advisories/34787↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5975↗www.vupen.comhttp://www.vupen.com/english/advisories/2009/1865↗