PT-2009-5342 · Linux · Linux Kernel

Vincent Danen · Publicado 2009-08-28 · Atualizado 2018-11-16 · CVE-2009-3002

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31-rc7

Description: The issue allows local users to read the contents of some kernel memory locations by calling getsockname on various socket types, including AF APPLETALK, AF IRDA, AF ECONET, AF NETROM, AF ROSE, and raw CAN sockets. This is related to the lack of initialization of certain data structures within getname functions, specifically the atalk getname, irda getname, econet getname, nr getname, rose getname, and raw getname functions.

Recommendations: For Linux kernel versions prior to 2.6.31-rc7, update to version 2.6.31-rc7 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-3002

DSA-1915-1

DSA-1928-1

DSA-1929-1

RHSA-2009:1540

RHSA-2009:1550

Produtos afetados

Linux Kernel

Referências · 27

• 🔥 https://exploit-db.com/exploits/9543 · Exploit
• 🔥 http://securityfocus.com/bid/36150 · Exploit
• 🔥 https://exploit-db.com/exploits/9521 · Exploit
• 🔥 http://exploit-db.com/exploits/9521 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=519305 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2009/08/27/2 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=80922bbb12a105f858a8f0abb879cb4302d0ecaa · Nota
• http://securityfocus.com/archive/1/512019/100/0/threaded · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11741 · Nota
• http://openwall.com/lists/oss-security/2009/08/27/1 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3d392475c873c10c10d6d96b94d092a34ebd4791 · Nota
• https://rhn.redhat.com/errata/RHSA-2009-1550.html · Aviso do Fabricante
• http://secunia.com/advisories/37351 · Nota