net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-devel | Dec 1, 2016 | Jun 22, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 22, 2011 |
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-desktop-develUpgrade kernel-kdumpUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-smpUpgrade kernel-debug-baseUpgrade kernel-paeUpgrade preload-kmp-defaultUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-vanilla-develUpgrade kernel-default-develUpgrade kernel-vanilla-baseUpgrade preload-kmp-desktopUpgrade kernel-pae-develUpgrade kernel-vmipaeUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-ec2-extraUpgrade kernel-xen-develUpgrade kernel-iseries64Upgrade kernel-xenpaeUpgrade kernel-trace-baseUpgrade kernel-pae-baseUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-desktopUpgrade kernel-kdumppaeUpgrade kernel-docsUpgrade kernel-ec2-baseUpgrade kernel-debug-develUpgrade kernel-desktop-baseUpgrade kernel-traceUpgrade kernel-vmi-develUpgrade kernel-vmi-baseUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-ec2-devel | Feb 17, 2015 | Jun 22, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-10-generic-paeUpgrade linux-image-2.6.38-10-powerpc-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.38-10-powerpc64-smpUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-lpiaUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-10-serverUpgrade linux-image-2.6.38-10-genericUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.38-10-omapUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-10-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.38-10-versatileUpgrade linux-image-2.6.38-10-powerpcUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-386 | Nov 8, 2024 | Jun 22, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Jun 22, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub