CVE-2019-12378: NULL Pointer Dereference

An issue was discovered in ip6racontrol in net/ipv6/ipv6sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of newra, which might allow an attacker to cause a denial of service NULL pointer dereference and system crash. NOTE: This has been disputed as not an issue...

Linux Kernel ipv6_getsockopt_sticky函数信息泄露漏洞

Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel IPv6相关的代码实现上存在漏洞，可能导致内核信息泄露。 Linux Kernel的net/ipv6/ipv6sockglue.c文件中的ipv6getsockoptsticky函数存在空指针引用漏洞，漏洞代码如下： 340 case IPV62292PKTOPTIONS: 341 342 struct ipv6txoptions opt = NULL; 1 343 struct msghdr msg; 344 struct flowi fl; 345 int junk; 346 347...

CVE-2007-1388: Undefined Security Weakness

The doipv6setsockopt function in net/ipv6/ipv6sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service oops by calling setsockopt with the IPV6RTHDR option name and possibly a zero option length or invalid option value, which triggers ...

CVE-2005-2555: Undefined Security Weakness

Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAPNETADMIN capability, which could allow local users to conduct unauthorized activities via 1 ipv4/ipsockglue.c and 2 ipv6/ipv6sockglue.c...