net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6,…

Description

net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.

Scores

EPSS (exploitation in 30 days)

0.43% · top 63% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.1.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (37)

• RHSA-2006:0437 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• ADV-2006-4502 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 20060531 rPSA-2006-0087-1 kernel (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• RHSA-2006:0579 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• USN-281-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 29841 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 22875 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 21136 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• MDKSA-2006:150 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• http://www.vmware.com/download/esx/esx-202-200610-patch.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 2006-0032 (opens in a new tab)vendor-advisoryx_refsource_TRUSTIXx_transferred
• MDKSA-2006:123 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• 20061113 VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 21983 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.vmware.com/download/esx/esx-213-200610-patch.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• linux-sockaddr-memory-leak(25425) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• DSA-1097 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• RHSA-2006:0575 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 19955 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:10875 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• RHSA-2006:0580 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www.vmware.com/download/esx/esx-254-200610-patch.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 19357 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 21465 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 21045 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 22417 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 17203 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 22093 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20671 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2006-2071 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• DSA-1184 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• [linux-netdev] 20060304 BUG: Small information leak in SO_ORIGINAL_DST (2.4 and 2.6) and (opens in a new tab)mailing-listx_refsource_MLISTx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-1343](https://trackcve.app/badge/CVE-2006-1343.svg)](https://trackcve.app/cve/CVE-2006-1343)

Record last updated 7 Aug 2024, 17:12 UTC.