CVE

Id
40436  
CVE No.
CVE-2009-3001  
Status
Candidate  
Description
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.  
Phase
Assigned (20090828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444307 40436 CVE-2009-3001 MILW0RM:9513  View
444308 40436 CVE-2009-3001 URL:http://www.milw0rm.com/exploits/9513  View
444309 40436 CVE-2009-3001 MLIST:[oss-security] 20090826 CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure  View
444310 40436 CVE-2009-3001 URL:http://www.openwall.com/lists/oss-security/2009/08/26/1  View
444311 40436 CVE-2009-3001 MISC:http://jon.oberheide.org/files/llc-getsockname-leak.c  View
444312 40436 CVE-2009-3001 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc  View
444313 40436 CVE-2009-3001 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=519305  View
444314 40436 CVE-2009-3001 UBUNTU:USN-852-1  View
444315 40436 CVE-2009-3001 URL:http://www.ubuntu.com/usn/USN-852-1  View
444316 40436 CVE-2009-3001 BID:36126  View
444317 40436 CVE-2009-3001 URL:http://www.securityfocus.com/bid/36126  View
444318 40436 CVE-2009-3001 SECUNIA:37105  View
444319 40436 CVE-2009-3001 URL:http://secunia.com/advisories/37105  View
444320 40436 CVE-2009-3001 XF:linux-kernel-afllcgetsockname-info-disc(52732)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43892 JVNDB-2009-004899 Lunascape におけるアドレスバーをなりすまされる脆弱性 Lunascape には、アドレスバーをなりすまされる脆弱性が存在します。 CVE-2009-3005 40436 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004899.html  View