net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-headers | Dec 1, 2016 | Jun 22, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 22, 2011 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-debug-baseUpgrade kernel-ec2-develUpgrade kernel-kdumpUpgrade kernel-ppc64Upgrade kernel-ec2-baseUpgrade preload-kmp-defaultUpgrade kernel-desktop-develUpgrade kernel-desktop-baseUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade preload-kmp-desktopUpgrade kernel-vmi-baseUpgrade kernel-smpUpgrade kernel-xen-develUpgrade kernel-vmipaeUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-trace-baseUpgrade kernel-bigsmpUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-vanilla-baseUpgrade kernel-sourceUpgrade kernel-vmi-develUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-develUpgrade kernel-xen-baseUpgrade kernel-vmiUpgrade kernel-kdumppaeUpgrade kernel-vanillaUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-desktop | Feb 17, 2015 | Jun 22, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.32-32-virtual | Nov 8, 2024 | Jun 22, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jun 22, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub