Description
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b ↗
- http://www.vupen.com/english/advisories/2006/4502 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0579.html ↗
- http://secunia.com/advisories/22875 ↗
- http://www.vmware.com/download/esx/esx-202-200610-patch.html ↗
- http://www.securityfocus.com/archive/1/451426/100/200/threaded ↗
- http://secunia.com/advisories/21035 ↗
- http://www.vmware.com/download/esx/esx-213-200610-patch.html ↗
- http://www.novell.com/linux/security/advisories/2006-05-31.html ↗
- http://www.redhat.com/support/errata/RHSA-2006-0580.html ↗
- http://www.vmware.com/download/esx/esx-254-200610-patch.html ↗
- http://secunia.com/advisories/19357 ↗
- http://www.securityfocus.com/archive/1/451404/100/0/threaded ↗
- http://secunia.com/advisories/20398 ↗
- http://www.securityfocus.com/archive/1/451417/100/200/threaded ↗
- http://www.securityfocus.com/bid/17203 ↗
- http://www.securityfocus.com/archive/1/451419/100/200/threaded ↗
- http://marc.info/?l=linux-netdev&m=114148078223594&w=2 ↗