CVEvulnerability
CVE-2009-3001
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-08-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.
Affected configurations
• linux linux kernel (< 2.6.31)
• linux linux kernel 2.6.31
• canonical ubuntu linux 6.06
• canonical ubuntu linux 8.04
• canonical ubuntu linux 8.10
• canonical ubuntu linux 9.04
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc git.kernel.org
- http://jon.oberheide.org/files/llc-getsockname-leak.c Broken Link
- http://secunia.com/advisories/37105 Third Party Advisory
- http://www.exploit-db.com/exploits/9513 Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2009/08/26/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/36126 Exploit, Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-852-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=519305 Exploit, Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52732 Third Party Advisory, VDB Entry
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc git.kernel.org
- http://jon.oberheide.org/files/llc-getsockname-leak.c Broken Link
- http://secunia.com/advisories/37105 Third Party Advisory
- http://www.exploit-db.com/exploits/9513 Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2009/08/26/1 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/36126 Exploit, Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-852-1 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=519305 Exploit, Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52732 Third Party Advisory, VDB Entry