net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-devel | Dec 1, 2016 | Jun 22, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 22, 2011 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-desktopUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-xenUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-vmipaeUpgrade kernel-paeUpgrade kernel-ec2Upgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-trace-develUpgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-vmiUpgrade kernel-sourceUpgrade kernel-vmi-develUpgrade kernel-kdumppaeUpgrade kernel-desktop-develUpgrade kernel-kdumpUpgrade kernel-debug-baseUpgrade kernel-default-baseUpgrade kernel-ec2-extraUpgrade kernel-xenpaeUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-vmi-baseUpgrade kernel-desktop-baseUpgrade kernel-docsUpgrade preload-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-source-vanillaUpgrade preload-kmp-desktop | Feb 17, 2015 | Jun 22, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-10-generic | Nov 8, 2024 | Jun 22, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jun 22, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub