Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Peak

#53517de 53,638
2.1CVSS total
Vulnerabilidades · 1
PT-2006-2351
2.1
2006-03-21
Linux · Linux Kernel · CVE-2006-1342
**Name of the Vulnerable Software and Affected Versions** Linux kernel version 2.4 **Description** The issue is related to the Linux kernel's handling of IPv4 socket names. Specifically, the `net/ipv4/af inet.c` file does not properly clear the `sockaddr in.sin zero` field before returning socket names from certain functions. This can allow local users to access potentially sensitive memory contents. The affected functions include `getsockname`, `getpeername`, and `accept`. **Recommendations** For Linux kernel version 2.4, consider applying a patch that properly clears the `sockaddr in.sin zero` field in the `getsockname`, `getpeername`, and `accept` functions to prevent potential memory leaks.