CVE-2006-1342
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4...
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
Exploit likelihood
What each source reports
NVD Score used
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
- Record
CVE-2006-1342- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
- Record
CVE-2006-1342- Updated
- 2026-11-02
EUVDEUVD-2006-1346 No score
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
- Record
EUVD-2006-1346- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jf62-rxq2-pm67 No score
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4...
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
- Record
GHSA-jf62-rxq2-pm67- Updated
- 2026-11-02
OSVBELL-CVE-2006-1342
CVE-2006-1342 does not affect BellSoft software
- Record
BELL-CVE-2006-1342- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.4.x/2.5.x/2.6.x - 'Sockaddr_In.Sin_Zero' Kernel Memory Disclosure | 2006-03-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1342 is a low vulnerability (CVSS 2.1) in Linux Kernel, published March 21, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.73%, the 54th percentile. No source names a fixed version.
References
kernel.org/git?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=09d3b3dcfa80c9094f1748c1be064b9326c9ef2b
vupen.com/english/advisories/2006/4502
redhat.com/support/errata/RHSA-2006-0579.html
secunia.com/advisories/22875
vmware.com/download/esx/esx-202-200610-patch.html
securityfocus.com/archive/1/451426/100/200/threaded
Show 16 moreShow less
novell.com/linux/security/advisories/2006-05-31.html
marc.info?l=linux-netdev&m=114148078223594&w=2
nvd.nist.gov/vuln/detail/CVE-2006-1342
github.com/advisories/GHSA-jf62-rxq2-pm67
docs.bell-sw.com/security/cves/CVE-2006-1342