Vulnerability in Linux Kernel
CVE-2006-1343
net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.
EPSS: 0.004 (34.5th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.4.0, 2.6.0
- N/a — versions n/a
References
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_REDHAT, vendor-advisory)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vdb-entry, x_refsource_VUPEN)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (mailing-list, x_refsource_BUGTRAQ)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_REDHAT, vendor-advisory)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_UBUNTU, vendor-advisory)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_OSVDB, vdb-entry)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_SECUNIA, third-party-advisory)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_SECUNIA, third-party-advisory)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (vendor-advisory, x_refsource_MANDRIVA)
- bc94ec7e-8909-4cbb-83df-d2fc9330fa88 (x_refsource_CONFIRM)