Unscored severity · published Apr 12, 2010
CVE-2010-1149
probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certain udevadm command or (2) reading a certain file under /dev/.udev/db/.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UD
Udisks · Freedesktop
through 1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1149
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1149
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576687
cgit.freedesktop.org
http://cgit.freedesktop.org/udisks/commit/?id=0fcc7cb3b66f23fac53ae08647aa0007a2bd56c4
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039060.html
Vendor Advisory
http://secunia.com/advisories/39332
www.securityfocus.com
http://www.securityfocus.com/bid/39265
bugs.freedesktop.org
https://bugs.freedesktop.org/show_bug.cgi?id=27494
More from Udisks
7.8
CVE-2018-17336
UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service…
7.1
CVE-2026-26103
Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api
5.5
CVE-2026-26104
Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api
–
CVE-2014-0004
Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long…