CVE-2007-1000

The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.

🔗 References (52)

• secalert@redhathttp://bugzilla.kernel.org/show_bug.cgi?id=8134
• secalert@redhathttp://fedoranews.org/cms/node/2787
• secalert@redhathttp://fedoranews.org/cms/node/2788
• secalert@redhathttp://lists.suse.com/archive/suse-security-announce/2007-May/0001.html
• secalert@redhathttp://secunia.com/advisories/24493
• secalert@redhathttp://secunia.com/advisories/24518
• secalert@redhathttp://secunia.com/advisories/24777
• secalert@redhathttp://secunia.com/advisories/24901
• secalert@redhathttp://secunia.com/advisories/25080
• secalert@redhathttp://secunia.com/advisories/25099
• secalert@redhathttp://secunia.com/advisories/25691
• secalert@redhathttp://secunia.com/advisories/26133
• secalert@redhathttp://secunia.com/advisories/26139
• secalert@redhathttp://www.kb.cert.org/vuls/id/920689
• secalert@redhathttp://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.2