ISS X-Force Database: linux-sockaddr-memory-leak(25425): Linux kernel sockaddr_in.sin

Linux kernel sockaddr_in.sin_zero kernel memory leak

linux-sockaddr-memory-leak (25425)

Low Risk

Description:

Linux kernel could allow a local attacker to obtain sensitive information. In certain situations net/ipv4/netfilter/ip_conntrack_core.c, net/ipv4/af_inet.c and net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c fail to properly clear sockaddr_in.sin_zero prior to returning IPv4 socket names from the getsockopt(), getsockname(), getpeername(), and accept() functions. This would result in 6 bytes of kernel memory being leaked to userspace, allowing a local attacker to possibly obtain sensitive information.

Consequences:

Obtain Information

Remedy:

Upgrade to the latest version of Linux kernel (2.6.16.19 or later), available from The Linux Kernel Archives. See References.

For VMware 2.5.3:
Apply the patch for this vulnerability, as listed in the VMware Advisory esx-253-200610-patch. See References.

For Debian GNU/Linux:
Refer to DSA-1097-1 or DSA-1184-1 for patch, upgrade, or suggested workaround information. See References.

For Red Hat Linux 2.1:
Refer to RHSA-2006:0579-12 and RHSA-2006:0580-7 for patch, upgrade, or suggested workaround information. See References.

For Red Hat Linux 3:
Refer to RHSA-2006:0437-22 for patch, upgrade, or suggested workaround information. See References.

For Red Hat Linux 4:
Refer to RHSA-2006:0575-22 for patch, upgrade, or suggested workaround information. See References.

For VMware ESX Server 2.0.2:
Apply the patch for this vulnerability, as listed in the VMware Advisory esx-202-200610-patch. See References.

For VMware ESX Server 2.1.3:
Apply the patch for this vulnerability, as listed in the VMware Advisory esx-213-200610-patch. See References.

For VMware ESX Server 2.5.4:
Apply the patch for this vulnerability, as listed in the VMware Advisory esx-254-200610-patch. See References.

For SUSE Linux:
Refer to SUSE-SA:2006:028 for patch, upgrade, or suggested workaround information. See References.

For other distributions:
Contact your vendor for upgrade or patch information.

References:

Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:22:20 CST: VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1.
Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:22:38 CST: VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4.
Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:22:54 CST: VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2.
Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:23:03 CST: VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2.
linux-netdev Mailing List, 2006-03-04 13:53:16: BUG: Small information leak in SO_ORIGINAL_DST (2.4 and 2.6) and.
The The Linux Kernel Archives: [PATCH] Fix small information leak in SO_ORIGINAL_DST and getname().
VMware Advisory esx-253-200610-patch: VMware ESX Server 2.5.3 Upgrade Patch 4 (for 2.5.3 Systems Only).
VMware Web site: VMware ESX Server 2.5.4 Upgrade Patch 1 (for 2.5.4 Systems Only).
VMware Web site: VMware ESX Server 2.0.2 Upgrade Patch 2 (for 2.0.2 Systems Only).
VMware Web site: VMware ESX Server 2.1.3 Upgrade Patch 2 (for 2.1.3 Systems Only).
ASA-2006-143: kernel security update (RHSA-2006-0580)
ASA-2006-180: Updated kernel packages for Red Hat Enterprise Linux 3 Update 8 (RHSA-2006-0437)
ASA-2006-200: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4 (RHSA-2006-0575)
BID-17203: Linux Kernel Ssockaddr_In.Sin_Zero Kernel Memory Disclosure Vulnerabilities
CVE-2006-1342: net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
DSA-1097: kernel-source-2.4.27 -- several vulnerabilities
DSA-1184: kernel-source-2.6.8 -- several vulnerabilities
MDKSA-2006:123: Updated kernel packages fixes multiple vulnerabilities
MDKSA-2006:150: Updated kernel packages fix multiple vulnerabilities
OSVDB ID: 29841: Linux Kernel net/ipv4/netfilter/ IPv4 Socket Name Return Arbitrary Memory Disclosure
RHSA-2006-0437: Updated kernel packages for Red Hat Enterprise Linux 3 Update 8
RHSA-2006-0575: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4
RHSA-2006-0579: kernel security update
RHSA-2006-0580: kernel security update
SA19357: Linux Kernel IPv4 "sockaddr_in.sin_zero" Information Disclosure
SA21983: Avaya Products Linux Kernel Multiple Vulnerabilities
SA22417: Avaya Products Linux Kernel Multiple Vulnerabilities
SA22875: VMware ESX Server Multiple Vulnerabilities
SUSE-SA:2006:028: various kernel security problems
USN-281-1: Linux kernel vulnerabilities
VUPEN/ADV-2006-2071: Linux Kernel SO_ORIGINAL_DST Option Information Disclosure Vulnerability
VUPEN/ADV-2006-4502: VMware ESX Server Security Update Fixes Multiple Buffer Overflow Vulnerabilities

Platforms Affected:

Canonical Ubuntu 5.04
Canonical Ubuntu 5.10
Debian Debian Linux 3.1
Linux Kernel 2.4.0
Linux Kernel 2.4.0 test1
Linux Kernel 2.4.0 test10
Linux Kernel 2.4.0 test11
Linux Kernel 2.4.0 test12
Linux Kernel 2.4.0 test2
Linux Kernel 2.4.0 test3
Linux Kernel 2.4.0 test4
Linux Kernel 2.4.0 test5
Linux Kernel 2.4.0 test6
Linux Kernel 2.4.0 test7
Linux Kernel 2.4.0 test8
Linux Kernel 2.4.0 test9
Linux Kernel 2.4.1
Linux Kernel 2.4.10
Linux Kernel 2.4.11 pre2
Linux Kernel 2.4.11 pre1
Linux Kernel 2.4.11
Linux Kernel 2.4.11 pre3
Linux Kernel 2.4.12
Linux Kernel 2.4.13
Linux Kernel 2.4.14
Linux Kernel 2.4.15
Linux Kernel 2.4.16
Linux Kernel 2.4.17
Linux Kernel 2.4.18 pre2
Linux Kernel 2.4.18 pre1
Linux Kernel 2.4.18 pre3
Linux Kernel 2.4.18 pre9
Linux Kernel 2.4.18 pre8
Linux Kernel 2.4.18 pre7
Linux Kernel 2.4.18 pre6
Linux Kernel 2.4.18 pre5
Linux Kernel 2.4.18
Linux Kernel 2.4.18 pre4
Linux Kernel 2.4.19 pre4
Linux Kernel 2.4.19 pre3
Linux Kernel 2.4.19 pre2
Linux Kernel 2.4.19 pre1
Linux Kernel 2.4.19
Linux Kernel 2.4.19 pre5
Linux Kernel 2.4.19 pre6
Linux Kernel 2.4.2
Linux Kernel 2.4.20
Linux Kernel 2.4.21 pre7
Linux Kernel 2.4.21 pre6
Linux Kernel 2.4.21 pre5
Linux Kernel 2.4.21 pre3
Linux Kernel 2.4.21 pre2
Linux Kernel 2.4.21
Linux Kernel 2.4.21 pre1
Linux Kernel 2.4.21 pre4
Linux Kernel 2.4.22 pre7
Linux Kernel 2.4.22 pre8
Linux Kernel 2.4.22 pre1
Linux Kernel 2.4.22 pre6
Linux Kernel 2.4.22 pre5
Linux Kernel 2.4.22 pre9
Linux Kernel 2.4.22 pre10
Linux Kernel 2.4.22 pre4
Linux Kernel 2.4.22 pre3
Linux Kernel 2.4.22 pre2
Linux Kernel 2.4.22
Linux Kernel 2.4.23 pre1
Linux Kernel 2.4.23 pre3
Linux Kernel 2.4.23 pre2
Linux Kernel 2.4.23 pre8
Linux Kernel 2.4.23 pre7
Linux Kernel 2.4.23 pre6
Linux Kernel 2.4.23 pre4
Linux Kernel 2.4.23 pre5
Linux Kernel 2.4.23 ow2
Linux Kernel 2.4.23 pre9
Linux Kernel 2.4.23
Linux Kernel 2.4.24
Linux Kernel 2.4.24 ow1
Linux Kernel 2.4.25
Linux Kernel 2.4.26
Linux Kernel 2.4.27 pre1
Linux Kernel 2.4.27 pre2
Linux Kernel 2.4.27 pre3
Linux Kernel 2.4.27
Linux Kernel 2.4.27 pre5
Linux Kernel 2.4.27 pre4
Linux Kernel 2.4.28
Linux Kernel 2.4.29 rc2
Linux Kernel 2.4.29
Linux Kernel 2.4.29 rc1
Linux Kernel 2.4.3 pre1
Linux Kernel 2.4.3 pre2
Linux Kernel 2.4.3
Linux Kernel 2.4.3 pre3
Linux Kernel 2.4.30 rc2
Linux Kernel 2.4.30
Linux Kernel 2.4.30 rc3
Linux Kernel 2.4.30 rc1
Linux Kernel 2.4.31
Linux Kernel 2.4.31 pre1
Linux Kernel 2.4.32
Linux Kernel 2.4.32 pre1
Linux Kernel 2.4.32 pre2
Linux Kernel 2.4.33 pre1
Linux Kernel 2.4.4
Linux Kernel 2.4.5
Linux Kernel 2.4.6
Linux Kernel 2.4.7
Linux Kernel 2.4.8
Linux Kernel 2.4.9 pre1
Linux Kernel 2.4.9 pre5
Linux Kernel 2.4.9 pre2
Linux Kernel 2.4.9 pre3
Linux Kernel 2.4.9
Linux Kernel 2.4.9 pre4
Linux Kernel 2.6.0 test8
Linux Kernel 2.6.0 test9
Linux Kernel 2.6.0
Linux Kernel 2.6.0 test1
Linux Kernel 2.6.0 test10
Linux Kernel 2.6.0 test7
Linux Kernel 2.6.0 test6
Linux Kernel 2.6.0 test5
Linux Kernel 2.6.0 test4
Linux Kernel 2.6.0 test3
Linux Kernel 2.6.0 test2
Linux Kernel 2.6.0 test11
Linux Kernel 2.6.1 rc2
Linux Kernel 2.6.1 rc3
Linux Kernel 2.6.1 rc1
Linux Kernel 2.6.1
Linux Kernel 2.6.10 rc3
Linux Kernel 2.6.10
Linux Kernel 2.6.10 rc2
Linux Kernel 2.6.10 rc1
Linux Kernel 2.6.11 rc4
Linux Kernel 2.6.11 rc3
Linux Kernel 2.6.11 rc2
Linux Kernel 2.6.11
Linux Kernel 2.6.11 rc1
Linux Kernel 2.6.11 rc5
Linux Kernel 2.6.11.1
Linux Kernel 2.6.11.10
Linux Kernel 2.6.11.11
Linux Kernel 2.6.11.12
Linux Kernel 2.6.11.2
Linux Kernel 2.6.11.3
Linux Kernel 2.6.11.4
Linux Kernel 2.6.11.5
Linux Kernel 2.6.11.6
Linux Kernel 2.6.11.7
Linux Kernel 2.6.11.8
Linux Kernel 2.6.11.9
Linux Kernel 2.6.12
Linux Kernel 2.6.12 rc6
Linux Kernel 2.6.12 rc5
Linux Kernel 2.6.12 rc4
Linux Kernel 2.6.12 rc3
Linux Kernel 2.6.12 rc2
Linux Kernel 2.6.12 rc1
Linux Kernel 2.6.12.1
Linux Kernel 2.6.12.12
Linux Kernel 2.6.12.2
Linux Kernel 2.6.12.22
Linux Kernel 2.6.12.3
Linux Kernel 2.6.12.4
Linux Kernel 2.6.12.5
Linux Kernel 2.6.12.6
Linux Kernel 2.6.13 rc1
Linux Kernel 2.6.13 rc2
Linux Kernel 2.6.13 rc3
Linux Kernel 2.6.13 rc4
Linux Kernel 2.6.13 rc5
Linux Kernel 2.6.13 rc6
Linux Kernel 2.6.13 rc7
Linux Kernel 2.6.13
Linux Kernel 2.6.13.1
Linux Kernel 2.6.13.2
Linux Kernel 2.6.13.3
Linux Kernel 2.6.13.4
Linux Kernel 2.6.13.5
Linux Kernel 2.6.14 rc4
Linux Kernel 2.6.14 rc5
Linux Kernel 2.6.14 rc3
Linux Kernel 2.6.14 rc2
Linux Kernel 2.6.14
Linux Kernel 2.6.14 rc1
Linux Kernel 2.6.14.1
Linux Kernel 2.6.14.2
Linux Kernel 2.6.14.3
Linux Kernel 2.6.14.4
Linux Kernel 2.6.14.5
Linux Kernel 2.6.14.6
Linux Kernel 2.6.14.7
Linux Kernel 2.6.15 rc5
Linux Kernel 2.6.15 rc6
Linux Kernel 2.6.15 rc7
Linux Kernel 2.6.15
Linux Kernel 2.6.15 rc2
Linux Kernel 2.6.15 rc4
Linux Kernel 2.6.15 rc3
Linux Kernel 2.6.15 rc1
Linux Kernel 2.6.15.1
Linux Kernel 2.6.15.11
Linux Kernel 2.6.15.2
Linux Kernel 2.6.15.3
Linux Kernel 2.6.15.4
Linux Kernel 2.6.15.5
Linux Kernel 2.6.15.6
Linux Kernel 2.6.15.7
Linux Kernel 2.6.2 rc2
Linux Kernel 2.6.2 rc1
Linux Kernel 2.6.2
Linux Kernel 2.6.2 rc3
Linux Kernel 2.6.3
Linux Kernel 2.6.3 rc2
Linux Kernel 2.6.3 rc3
Linux Kernel 2.6.3 rc4
Linux Kernel 2.6.3 rc1
Linux Kernel 2.6.4 rc2
Linux Kernel 2.6.4 rc1
Linux Kernel 2.6.4 rc3
Linux Kernel 2.6.4
Linux Kernel 2.6.5 rc1
Linux Kernel 2.6.5 rc2
Linux Kernel 2.6.5 rc3
Linux Kernel 2.6.5
Linux Kernel 2.6.6
Linux Kernel 2.6.6 rc2
Linux Kernel 2.6.6 rc3
Linux Kernel 2.6.6 rc1
Linux Kernel 2.6.7 rc2
Linux Kernel 2.6.7 rc1
Linux Kernel 2.6.7 rc3
Linux Kernel 2.6.7
Linux Kernel 2.6.8 rc3
Linux Kernel 2.6.8 rc4
Linux Kernel 2.6.8 rc2
Linux Kernel 2.6.8 rc1
Linux Kernel 2.6.8
Linux Kernel 2.6.8.1
Linux Kernel 2.6.9 rc1
Linux Kernel 2.6.9 rc3
Linux Kernel 2.6.9 rc4
Linux Kernel 2.6.9 rc2
Linux Kernel 2.6.9
MandrakeSoft Mandrake Linux 2006 X86_64
MandrakeSoft Mandrake Linux 2006
MandrakeSoft Mandrake Linux Corporate Server 3.0 X86_64
MandrakeSoft Mandrake Linux Corporate Server 3.0
MandrakeSoft Mandrake Multi Network Firewall 2.0
Novell UnitedLinux 1.0
RedHat Enterprise Linux 2.1 WS
RedHat Enterprise Linux 2.1 AS
RedHat Enterprise Linux 2.1 ES
RedHat Enterprise Linux 3 ES
RedHat Enterprise Linux 3 AS
RedHat Enterprise Linux 3 WS
RedHat Enterprise Linux 3 Desktop
RedHat Enterprise Linux 4 ES
RedHat Enterprise Linux 4 AS
RedHat Enterprise Linux 4 WS
RedHat Enterprise Linux 4 Desktop
RedHat Linux Advanced Workstation 2.1 Itanium
SuSE Linux Enterprise Server 8
SuSE Linux Enterprise Server 9
SUSE SuSE Linux 10.0
SUSE SuSE Linux 9.1
SUSE SuSE Linux 9.2
SUSE SuSE Linux 9.3
SuSE SuSE Linux Desktop 1.0
SuSE SuSE SLES 9
VMware ESX Server 2.0.2
VMware ESX Server 2.1.3
VMware ESX Server 2.5.3
VMware ESX Server 2.5.4

Reported:

Mar 04, 2006

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page