cve/2006/CVE-2006-1343.md

### [CVE-2006-1343](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1343)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.

### POC

#### Reference
- http://www.vmware.com/download/esx/esx-254-200610-patch.html

#### Github
No PoCs found on GitHub currently.