net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.12-10-iseries-smp | Nov 8, 2024 | Mar 21, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub