Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-1343
HistoryMar 21, 2006 - 12:00 a.m.

CVE-2006-1343

2006-03-2100:00:00
ubuntu.com
ubuntu.com
19

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

26.9%

net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and
possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not
clear sockaddr_in.sin_zero before returning IPv4 socket names from the
getsockopt function with SO_ORIGINAL_DST, which allows local users to
obtain portions of potentially sensitive memory.

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

26.9%