CVE-2006-1342

net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.

CVSS v2.0 NVD

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.73% chance of exploitation in the next 30 days, 53rd percentile

Published

2006-03-21

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27461

Security advisories

• http://www.redhat.com/support/errata/RHSA-2006-0579.html
• http://www.redhat.com/support/errata/RHSA-2006-0580.html
• http://www.securityfocus.com/bid/17203

References

• CVE Record
• NVD entry