CVE-2006-1342
- State
- Published
- Severity
- Not scored
- Published
- Mar 21, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 21, 2006
Description
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b
- ADV-2006-4502vdb-entry
- RHSA-2006:0579vendor-advisory
- 22875third-party-advisory
- http://www.vmware.com/download/esx/esx-202-200610-patch.html
- 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2mailing-list
- 21035third-party-advisory
- http://www.vmware.com/download/esx/esx-213-200610-patch.html
- SUSE-SA:2006:028vendor-advisory
- RHSA-2006:0580vendor-advisory
- http://www.vmware.com/download/esx/esx-254-200610-patch.html
- 19357third-party-advisory
- 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4mailing-list
- 20398third-party-advisory
- 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2mailing-list
- 17203vdb-entry
- 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1mailing-list
- [linux-netdev] 20060304 BUG: Small information leak in SO_ORIGINAL_DST (2.4 and 2.6) andmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.