udev project records
4 published records for vendor udev project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-276 Incorrect Default Permissions1
- CWE-346 Origin Validation Error1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2009-1185Weaponized | udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by senudev project · udev · CWE-346 | High7.2 | — | 80.5% | Apr 17, 2009 |
27Monitor | CVE-2011-0640No exploit | The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality overudev project · udev | Medium6.9 | — | 0.3% | Jan 24, 2011 |
17Monitor | CVE-2010-4176No exploit | plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which aldracut project · dracut · CWE-276 | Medium4.0 | — | 2.3% | Dec 7, 2010 |
8Monitor | CVE-2009-1186No exploit | Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of serudev project · udev · CWE-120 | Low2.1 | — | 0.5% | Apr 17, 2009 |
- CVE-2009-118552Plan
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sen
HighCVSS 7.2WeaponizedEPSS 80%udev project · udevApr 17, 2009
- CVE-2011-064027Monitor
The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over
MediumCVSS 6.9No exploitEPSS 0%udev project · udevJan 24, 2011
- CVE-2010-417617Monitor
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which al
MediumCVSS 4.0No exploitEPSS 2%dracut project · dracutDec 7, 2010
- CVE-2009-11868Monitor
Buffer overflow in the util_path_encode function in udev/lib/libudev-util.c in udev before 1.4.1 allows local users to cause a denial of ser
LowCVSS 2.1No exploitEPSS 0%udev project · udevApr 17, 2009