NVD

Id
50218  
Name
CVE-2009-3001  
Description
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-28  
Modified Date
2012-03-19  
Seq
2009-3001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254202 50218 CVE-2009-3001 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc  View
254203 50218 CVE-2009-3001 http://jon.oberheide.org/files/llc-getsockname-leak.c  View
254204 50218 CVE-2009-3001 9513  View
254205 50218 CVE-2009-3001 [oss-security] 20090826 CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure  View
254206 50218 CVE-2009-3001 36126  View
254207 50218 CVE-2009-3001 USN-852-1  View
254208 50218 CVE-2009-3001 linux-kernel-afllcgetsockname-info-disc(52732)  View
254209 50218 CVE-2009-3001 https://bugzilla.redhat.com/show_bug.cgi?id=519305  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43890 JVNDB-2009-004897 Linux kernel の net/llc/af_llc.c における一部のカーネルメモリの配置のコンテンツを読まれる脆弱性 Linux kernel の net/llc/af_llc.c の llc_ui_getname 関数は、特定のデータ構造を初期化しないため、一部のカーネルメモリの配置のコンテンツを読まれる脆弱性が存在します。 CVE-2009-3001 40432 CVE-2009-3001 50218 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004897.html 2009-08-24 2012-09-25 View