Red Hat Bugzilla – Bug 1058748
CVE-2014-1690 Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper
Last modified: 2015-08-24 15:58:48 EDT
Linux kernel built with the NetFilter Connection Tracking(NF_CONNTRACK)
support for IRC protocol(NF_NAT_IRC), is vulnerable to an information leakage
flaw. It could occur when communicating over direct client-to-client IRC
connection(/dcc) via a NAT-ed network. Kernel attempts to mangle IRC TCP
packet's content, wherein an uninitialised 'buffer' object is copied to a
socket buffer and sent over to the other end of a connection.
A user/program could use this flaw to leak kernel memory bytes.
This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.
This issue was discovered by Daniel Borkmann of Red Hat Inc.
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 1058786]
This issue has been addressed in following products:
MRG for RHEL-6 v.2
Via RHSA-2014:0439 https://rhn.redhat.com/errata/RHSA-2014-0439.html