Description
The _udp_lib_get_port function in net/ipv4/udp.c in Linux kernel 2.6.21 and earlier does not prevent a bind to a port with a local address when there is already a bind to that port with a wildcard local address, which might allow local users to intercept local traffic for daemons or other applications.
References (2)
Core 2
Core References
Patch x_refsource_confirm
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=de34ed91c4ffa4727964a832c46e624dd1495cf5
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/39235
Scores
EPSS
0.0035
EPSS Percentile
27.9%
Details
Status
published
Products (1)
linux/linux_kernel
< 2.6.21
Published
May 03, 2007
Tracked Since
Feb 18, 2026