Vendor/product archive

udev_project / udev CVEs

Beta · best-effort

4 CVEs tagged to udev_project / udev — 0 Critical, 1 High, 2 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to udev_project vendor archive

CVE-2011-0640

Published Jan 25, 2011

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attack…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-4176

Published Dec 7, 2010

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read…

CVSS 4.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2009-1186

Published Apr 17, 2009

Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of service (service outage) via vectors that…

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

CVE-2009-1185

Published Apr 17, 2009

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1