net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-xen-devel | Dec 1, 2016 | Jun 22, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 22, 2011 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-vanillaUpgrade kernel-smpUpgrade kernel-vmi-baseUpgrade kernel-paeUpgrade kernel-kdumppaeUpgrade kernel-ec2-develUpgrade kernel-sourceUpgrade kernel-desktop-baseUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-vmipaeUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-desktopUpgrade kernel-debug-baseUpgrade kernel-vmiUpgrade kernel-pae-baseUpgrade kernel-vmi-develUpgrade kernel-bigsmpUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-kdumpUpgrade kernel-debug-develUpgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-debugUpgrade kernel-ec2-extraUpgrade kernel-vanilla-baseUpgrade preload-kmp-desktopUpgrade kernel-develUpgrade kernel-trace-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-ec2-baseUpgrade kernel-desktop-develUpgrade kernel-source-vanillaUpgrade kernel-vanilla-develUpgrade preload-kmp-defaultUpgrade kernel-default | Feb 17, 2015 | Jun 22, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-virtual | Nov 8, 2024 | Jun 22, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jun 22, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub