CVE-2006-1342

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-21 · updated 2026-06-16

Description

net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.

Affected products

Linux kernel: 2.4.0

References

http://marc.info/?l=linux-netdev&m=114148078223594&w=2
http://secunia.com/advisories/19357
http://secunia.com/advisories/20398
http://secunia.com/advisories/21035
http://secunia.com/advisories/22875
http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b
http://www.novell.com/linux/security/advisories/2006-05-31.html
http://www.redhat.com/support/errata/RHSA-2006-0579.html
http://www.redhat.com/support/errata/RHSA-2006-0580.html
http://www.securityfocus.com/archive/1/451404/100/0/threaded
http://www.securityfocus.com/archive/1/451417/100/200/threaded
http://www.securityfocus.com/archive/1/451419/100/200/threaded

Get alerted when CVE-2006-1342 or the next vulnerability affects your stack