CVE-2006-1342

Linux kernel <2.4 - Info Disclosure

Title source: llm

Description

net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Pavel Kankovsky · clocallinux
https://www.exploit-db.com/exploits/27461

References (18)

Scores

EPSS 0.0017
EPSS Percentile 38.5%

Classification

Status draft

Affected Products (1)

linux/linux_kernel

Timeline

Published Mar 21, 2006
Tracked Since Feb 18, 2026