NVD

Id
50219  
Name
CVE-2009-3002  
Description
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows local users to read the contents of some kernel memory locations by calling getsockname on (1) an AF_APPLETALK socket, related to the atalk_getname function in net/appletalk/ddp.c; (2) an AF_IRDA socket, related to the irda_getname function in net/irda/af_irda.c; (3) an AF_ECONET socket, related to the econet_getname function in net/econet/af_econet.c; (4) an AF_NETROM socket, related to the nr_getname function in net/netrom/af_netrom.c; (5) an AF_ROSE socket, related to the rose_getname function in net/rose/af_rose.c; or (6) a raw CAN socket, related to the raw_getname function in net/can/raw.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-08-28  
Modified Date
2013-07-13  
Seq
2009-3002  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
254210 50219 CVE-2009-3002 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=09384dfc76e526c3993c09c42e016372dc9dd22c  View
254211 50219 CVE-2009-3002 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=17ac2e9c58b69a1e25460a568eae1b0dc0188c25  View
254212 50219 CVE-2009-3002 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d392475c873c10c10d6d96b94d092a34ebd4791  View
254213 50219 CVE-2009-3002 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=80922bbb12a105f858a8f0abb879cb4302d0ecaa  View
254214 50219 CVE-2009-3002 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e84b90ae5eb3c112d1f208964df1d8156a538289  View
254215 50219 CVE-2009-3002 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f6b97b29513950bfbf621a83d85b6f86b39ec8db  View
254216 50219 CVE-2009-3002 SUSE-SA:2009:054  View
254217 50219 CVE-2009-3002 SUSE-SA:2009:056  View
254218 50219 CVE-2009-3002 SUSE-SA:2010:012  View
254219 50219 CVE-2009-3002 oval:org.mitre.oval:def:11611  View
254220 50219 CVE-2009-3002 oval:org.mitre.oval:def:11741  View
254221 50219 CVE-2009-3002 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.31-rc7  View
254222 50219 CVE-2009-3002 9521  View
254223 50219 CVE-2009-3002 [oss-security] 20090827 Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure  View
254224 50219 CVE-2009-3002 [oss-security] 20090827 Re: CVE request: kernel: AF_LLC getsockname 5-Byte Stack Disclosure  View
254225 50219 CVE-2009-3002 20100625 VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel  View
254226 50219 CVE-2009-3002 36150  View
254227 50219 CVE-2009-3002 USN-852-1  View
254228 50219 CVE-2009-3002 https://bugzilla.redhat.com/show_bug.cgi?id=519305  View
254229 50219 CVE-2009-3002 RHSA-2009:1540  View
254230 50219 CVE-2009-3002 RHSA-2009:1550  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41353 JVNDB-2009-002360 Linux Kernel におけるカーネルメモリの格納場所にあるコンテンツを読み取られる脆弱性 Linux Kernel には、getname 関数内の特定のデータ構造が初期化されないため、カーネルメモリの格納場所にあるコンテンツを読み取られる脆弱性が存在します。 CVE-2009-3002 40433 CVE-2009-3002 50219 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002360.html 2009-08-28 2009-12-28 View