CVEvulnerability

CVE-2006-1343

2.1 LOW Published 2006-03-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-03-21
Last modified
2026-06-16
Assigner
bc94ec7e-8909-4cbb-83df-d2fc9330fa88
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.

Affected configurations

• linux linux kernel 2.4.0 • linux linux kernel 2.6.0

References