net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-64k-pagesizeUpgrade kernel-smpUpgrade um-host-kernelUpgrade kernel-s390Upgrade kernel-s390xUpgrade kernel-defaultUpgrade kernel-pseries64Upgrade kernel-sourceUpgrade um-host-install-initrdUpgrade kernel-iseries64Upgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-bigsmpUpgrade kernel-sn2Upgrade kernel-debugUpgrade kernel-syms | Feb 17, 2015 | Mar 21, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub