cve/cves/2009/CVE-2009-2698.md

CVE-2009-2698

Description

The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.

POC

Reference

No PoCs from references.

Github

• https://github.com/xiaoxiaoleo/CVE-2009-2698
• https://github.com/0b0111100/2009

ExploitDB

• https://www.exploit-db.com/exploits/9575
• https://www.exploit-db.com/exploits/9574
• https://www.exploit-db.com/exploits/9542

Collections

• https://github.com/helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2009/CVE-2009-2698