CVE-2006-1342: Low severity Linux Linux kernel vulnerability
Published Mar 21, 2006
·Updated
net/ipv4/afinet.c in Linux kernel 2.4 does not clear sockaddrin.sinzero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
Affected Software
1 affected component
Linux Linux kernel=2.4.0
Remediation
Event History
Mar 21, 2006
CVE Published
06:02 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1342?
CVE-2006-1342 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2006-1342?
To fix CVE-2006-1342, upgrade to a later version of the Linux kernel that includes the patch for this vulnerability.
3
Who is affected by CVE-2006-1342?
Local users on systems running Linux kernel version 2.4.0 are affected by CVE-2006-1342.
4
What is the impact of CVE-2006-1342?
The impact of CVE-2006-1342 is that local users may gain unauthorized access to sensitive memory data.
5
In which functions does CVE-2006-1342 manifest?
CVE-2006-1342 manifests in the getsockname, getpeername, and accept functions of the Linux kernel.