Published: 28/08/2009 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and previous versions does not initialize a certain data structure, which allows local users to read the contents of some kernel memory locations by calling getsockname on an AF_LLC socket.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.31
linux linux kernel
canonical ubuntu linux 6.06
canonical ubuntu linux 9.04
canonical ubuntu linux 8.04
canonical ubuntu linux 8.10

Solar Designer discovered that the z90crypt driver did not correctly check capabilities A local attacker could exploit this to shut down the device, leading to a denial of service Only affected Ubuntu 606 (CVE-2009-1883) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2846 Michael Buesch noticed a typing issue in the eisa-eeprom driver for the hppa architecture Lo ...

/* * llc-getsockname-leakc * * Linux Kernel <= 2631-rc7 AF_LLC getsockname 5-Byte Stack Disclosure * Jon Oberheide <jon@oberheideorg> * jonoberheideorg * * Information: * * gitkernelorg/linus/28e9fc592cb8c7a43e4d3147b38be6032a0e81bc * * sllc_arphrd member of sockaddr_llc might not be changed Zero s ...

CWE-200 http://www.openwall.com/lists/oss-security/2009/08/26/1 http://www.securityfocus.com/bid/36126 https://bugzilla.redhat.com/show_bug.cgi?id=519305 http://jon.oberheide.org/files/llc-getsockname-leak.c http://secunia.com/advisories/37105 http://www.ubuntu.com/usn/USN-852-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/52732 http://www.exploit-db.com/exploits/9513 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=28e9fc592cb8c7a43e4d3147b38be6032a0e81bc https://usn.ubuntu.com/852-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/9513/

CVE-2009-3001

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect