|
|
| |
|
| |
kernel: information disclosure
| Package(s): | kernel |
CVE #(s): | CVE-2012-3430
|
| Created: | August 6, 2012 |
Updated: | October 3, 2012 |
| Description: |
From the Red Hat bugzilla:
Two similar issues:
1) Reported by Jay Fenlason and Doug Ledford:
recvfrom() on an RDS socket can disclose sizeof(struct sockaddr_storage)-sizeof(struct sockaddr_in) bytes of kernel stack to userspace when receiving a datagram.
2) Reported by Jay Fenlason:
recv{from,msg}() on an RDS socket can disclose sizeof(struct sockaddr_storage)
bytes of kernel stack to userspace when other code paths are taken. |
| Alerts: |
|
( Log in to post comments)
|
|
|