Vulnerabilities > Udev Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2011-01-25 | CVE-2011-0640 | Unspecified vulnerability in Udev Project Udev The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the user connected to the computer. local udev-project | 6.9 |
| 2010-12-07 | CVE-2010-4176 | Incorrect Default Permissions vulnerability in multiple products plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users. | 4.0 |