NVD

Id
48002  
Name
CVE-2009-0676  
Description
The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SO_BSDCOMPAT getsockopt request.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-02-22  
Modified Date
2012-04-12  
Seq
2009-0676  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240691 48002 CVE-2009-0676 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=df0bca049d01c0ee94afb7cd5dfd959541e6c8da  View
240692 48002 CVE-2009-0676 SUSE-SA:2009:021  View
240693 48002 CVE-2009-0676 SUSE-SA:2009:030  View
240694 48002 CVE-2009-0676 SUSE-SA:2009:031  View
240695 48002 CVE-2009-0676 [linux-kernel] 20090212 [PATCH] 4 bytes kernel memory disclosure in SO_BSDCOMPAT gsopt try #2  View
240696 48002 CVE-2009-0676 [linux-kernel] 20090223 net: amend the fix for SO_BSDCOMPAT gsopt infoleak  View
240697 48002 CVE-2009-0676 [oss-security] 20090220 CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt  View
240698 48002 CVE-2009-0676 oval:org.mitre.oval:def:11653  View
240699 48002 CVE-2009-0676 oval:org.mitre.oval:def:8618  View
240700 48002 CVE-2009-0676 http://patchwork.kernel.org/patch/6816/  View
240701 48002 CVE-2009-0676 RHSA-2009:0459  View
240702 48002 CVE-2009-0676 DSA-1749  View
240703 48002 CVE-2009-0676 DSA-1787  View
240704 48002 CVE-2009-0676 DSA-1794  View
240705 48002 CVE-2009-0676 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28.6  View
240706 48002 CVE-2009-0676 MDVSA-2009:071  View
240707 48002 CVE-2009-0676 [oss-security] 20090224 Re: CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt  View
240708 48002 CVE-2009-0676 [oss-security] 20090302 Re: CVE request: kernel: memory disclosure in SO_BSDCOMPAT gsopt  View
240709 48002 CVE-2009-0676 RHSA-2009:0326  View
240710 48002 CVE-2009-0676 RHSA-2009:0360  View
240711 48002 CVE-2009-0676 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
240712 48002 CVE-2009-0676 33846  View
240713 48002 CVE-2009-0676 USN-751-1  View
240714 48002 CVE-2009-0676 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
240715 48002 CVE-2009-0676 ADV-2009-3316  View
240716 48002 CVE-2009-0676 kernel-sock-information-disclosure(48847)  View
240717 48002 CVE-2009-0676 https://bugzilla.redhat.com/show_bug.cgi?id=486305  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40178 JVNDB-2009-001184 Linux kernel の sock_getsockopt 関数における重要な情報を取得される脆弱性 Linux kernel の net/core/sock.c に内にある sock_getsockopt 関数には、特定の構造体のメンバーを初期化しないため、SO_BSDCOMPAT getsockopt リクエストの処理により、kernel メモリから重要な情報を取得される脆弱性が存在します。 CVE-2009-0676 38107 CVE-2009-0676 48002 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001184.html 2009-02-22 2009-06-23 View