CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to...

2.1 Low

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certain udevadm command or (2) reading a certain file under /dev/.udev/db/.

Exploit likelihood

0.27%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2010-1149
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-1149
Updated: 2026-11-02

EUVDEUVD-2010-1180 No score

Record: EUVD-2010-1180
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5hh6-fqvm-v5v8 No score

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to...

Record: GHSA-5hh6-fqvm-v5v8
Weakness: CWE-200
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10408-1 No score

udisks-1.0.5-5.10 on GA media

These are all security issues fixed in the udisks-1.0.5-5.10 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10408-1
Updated: 2026-11-02

Affected products

freedesktop udisks

Affected packages

Affected packages
Package	Affected	Fixed
`udisks` openSUSE:Tumbleweed From an advisory covering 3 CVEs	before 1.0.5-5.10	1.0.5-5.10

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1149 is a low vulnerability (CVSS 2.1) in Freedesktop Udisks, published April 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.27%, the 19th percentile. No source names a fixed version.

References

Show 8 moreShow less