Vulnerability-Lookup

BDU:2015-03629 (CVE-2004-2731)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации

Summary

Множественные уязвимости пакета kernel-image-2.4.27-4-smp операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-189 - Ошибки, возникающие при обработке чисел

Aliases

CVE-2004-2731, CVE-2006-4814, CVE-2006-5753, CVE-2006-5823, CVE-2006-6053, CVE-2006-6054, CVE-2006-6106, CVE-2007-1353, CVE-2007-1592, CVE-2007-2172, CVE-2007-2525, CVE-2007-3848, CVE-2007-4308, CVE-2007-4311, CVE-2007-5093, CVE-2007-6063, CVE-2007-6151, CVE-2007-6206, CVE-2007-6694, CVE-2008-0007, DSA-1503, ID:1402392

References

21 references

URL
http://www.debian.org/security/dsa-1503/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5823
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1592
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3848
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6151
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2172
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4311
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6053
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2525
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5753
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6694
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1353

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 3.1 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 3.1: ppc: mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-powerpc-small - 2.4.27-10sarge6 kernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge6 kernel-image-2.4.27-nubus - 2.4.27-10sarge6 kernel-image-2.4.27-powerpc - 2.4.27-10sarge6 kernel-patch-2.4.27-powerpc - 2.4.27-10sarge6 kernel-patch-2.4.27-nubus - 2.4.27-10sarge6 kernel-headers-2.4.27-powerpc - 2.4.27-10sarge6 kernel-build-2.4.27-apus - 2.4.27-10sarge6 kernel-headers-2.4.27-nubus - 2.4.27-10sarge6 kernel-patch-2.4.27-apus - 2.4.27-10sarge6 kernel-image-2.4.27-apus - 2.4.27-10sarge6 kernel-headers-2.4.27-apus - 2.4.27-10sarge6 kernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge6 kernel-build-2.4.27-nubus - 2.4.27-10sarge6 kernel-build-2.4.27-powerpc - 2.4.27-10sarge6 kernel-build-2.4.27-powerpc-small - 2.4.27-10sarge6 s390x: kernel-image-2.4.27-4-s390-tape - 2.4.27-2sarge6 kernel-image-2.4.27-4-s390x - 2.4.27-2sarge6 kernel-headers-2.4.27-4 - 2.4.27-2sarge6 kernel-headers-2.4-s390 - 2.4.27-1sarge2 kernel-image-2.4-s390x - 2.4.27-1sarge2 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-4-s390 - 2.4.27-2sarge6 kernel-image-2.4-s390 - 2.4.27-1sarge2 m68k: kernel-image-2.4.27-amiga - 2.4.27-3sarge6 kernel-image-2.4.27-mac - 2.4.27-3sarge6 kernel-image-2.4.27-mvme16x - 2.4.27-3sarge6 kernel-image-2.4.27-mvme147 - 2.4.27-3sarge6 kernel-image-2.4.27-bvme6000 - 2.4.27-3sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-atari - 2.4.27-3sarge6 kernel-image-2.4.27-q40 - 2.4.27-3sarge6 i686: kernel-image-2.4-k7 - 101sarge2 i2c-2.4.27-4-386 - 2.9.1-1sarge2 kernel-pcmcia-modules-2.4.27-4-k7-smp - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4.27-4-k7 - 2.4.27-10sarge6 kernel-headers-2.4-686 - 101sarge2 i2c-2.4.27-4-k7 - 2.9.1-1sarge2 kernel-image-2.4.27-speakup - 2.4.27-1.1sarge5 kernel-headers-2.4-386 - 101sarge2 hostap-modules-2.6.8-4-686 - 0.3.7-1sarge3 kernel-image-2.4-k7-smp - 101sarge2 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27-4-386 - 2.4.27-10sarge6 pcmcia-modules-2.4.27-4-586tsc - 3.2.5+2sarge2 lm-sensors-2.4.27-4-k6 - 2.9.1-1sarge4 kernel-image-2.4.27-4-k7-smp - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4-686 - 101sarge2 kernel-image-2.4.27-4-686 - 2.4.27-10sarge6 pcmcia-modules-2.4.27-4-k6 - 3.2.5+2sarge2 lm-sensors-2.4.27-4-386 - 2.9.1-1sarge4 kernel-headers-2.4-k7-smp - 101sarge2 kernel-image-2.4-586tsc - 101sarge2 lm-sensors-2.4.27-4-686-smp - 2.9.1-1sarge4 libsensors3 - 2.9.1-1sarge4 kernel-headers-2.4.27-4-586tsc - 2.4.27-10sarge6 kernel-headers-2.4.27-4 - 2.4.27-10sarge6 kernel-image-2.4-686 - 101sarge2 kernel-image-2.4-386 - 101sarge2 kernel-headers-2.4-k6 - 101sarge2 kernel-pcmcia-modules-2.4-686-smp - 101sarge2 kernel-pcmcia-modules-2.4-386 - 101sarge2 i2c-2.4.27-4-k7-smp - 2.9.1-1sarge2 i2c-2.4.27-4-686-smp - 2.9.1-1sarge2 i2c-2.4.27-4-686 - 2.9.1-1sarge2 kernel-headers-2.4-586tsc - 101sarge2 hostap-modules-2.6.8-4-686-smp - 0.3.7-1sarge3 hostap-modules-2.4.27-4-k7 - 0.3.7-1sarge3 kernel-headers-2.4-686-smp - 101sarge2 i2c-2.4.27-4-k6 - 2.9.1-1sarge2 kernel-pcmcia-modules-2.4.27-4-686-smp - 2.4.27-10sarge6 hostap-modules-2.4.27-4-586tsc - 0.3.7-1sarge3 hostap-modules-2.4.27-4-686-smp - 0.3.7-1sarge3 kernel-headers-2.4.27-4-686-smp - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4.27-4-586tsc - 2.4.27-10sarge6 kernel-pcmcia-modules-2.4-k7-smp - 101sarge2 kernel-headers-2.4.27-speakup - 2.4.27-1.1sarge5 lm-sensors-2.4.27-4-686 - 2.9.1-1sarge4 hostap-modules-2.4.27-4-386 - 0.3.7-1sarge3 kernel-image-2.4.27-4-k7 - 2.4.27-10sarge6 hostap-modules-2.6.8-4-k7 - 0.3.7-1sarge3 kernel-image-2.4.27-4-686-smp - 2.4.27-10sarge6 hostap-modules-2.6.8-4-k7-smp - 0.3.7-1sarge3 pcmcia-modules-2.4.27-4-k7 - 3.2.5+2sarge2 kernel-headers-2.4.27-4-k6 - 2.4.27-10sarge6 hostap-modules-2.4.27-4-k6 - 0.3.7-1sarge3 hostap-modules-2.6.8-4-386 - 0.3.7-1sarge3 kernel-pcmcia-modules-2.4-k7 - 101sarge2 pcmcia-modules-2.4.27-4-k7-smp - 3.2.5+2sarge2 kernel-headers-2.4.27-4-686 - 2.4.27-10sarge6 pcmcia-modules-2.4.27-4-686 - 3.2.5+2sarge2 lm-sensors-2.4.27-4-k7-smp - 2.9.1-1sarge4 kernel-pcmcia-modules-2.4.27-4-686 - 2.4.27-10sarge6 libsensors-dev - 2.9.1-1sarge4 kernel-pcmcia-modules-2.4-586tsc - 101sarge2 kernel-headers-2.4.27-4-k7 - 2.4.27-10sarge6 kernel-image-2.4.27-4-k6 - 2.4.27-10sarge6 kernel-headers-2.4-k7 - 101sarge2 kernel-pcmcia-modules-2.4-k6 - 101sarge2 kernel-build-2.4.27-4 - 2.4.27-10sarge6 kernel-image-2.4-k6 - 101sarge2 hostap-modules-2.4.27-4-686 - 0.3.7-1sarge3 lm-sensors-2.4.27-4-k7 - 2.9.1-1sarge4 kernel-pcmcia-modules-2.4.27-4-386 - 2.4.27-10sarge6 lm-sensors-2.4.27-4-586tsc - 2.9.1-1sarge4 mindi-kernel - 2.4.27-2sarge5 kernel-pcmcia-modules-2.4.27-4-k6 - 2.4.27-10sarge6 i2c-2.4.27-4-586tsc - 2.9.1-1sarge2 pcmcia-modules-2.4.27-4-686-smp - 3.2.5+2sarge2 kernel-image-2.4-686-smp - 101sarge2 lm-sensors - 2.9.1-1sarge4 kernel-image-2.4.27-4-386 - 2.4.27-10sarge6 sensord - 2.9.1-1sarge4 kernel-headers-2.4.27-4-k7-smp - 2.4.27-10sarge6 hostap-modules-2.4.27-4-k7-smp - 0.3.7-1sarge3 pcmcia-modules-2.4.27-4-386 - 3.2.5+2sarge2 kernel-image-2.4.27-4-586tsc - 2.4.27-10sarge6 hppa: mips-tools - 2.4.27-10.sarge4.040815-3 sparc: kernel-image-2.4-sparc64-smp - 42sarge3 kernel-image-2.4-sparc32-smp - 42sarge3 kernel-image-2.4-sparc32 - 42sarge3 kernel-image-2.4-sparc64 - 42sarge3 kernel-image-2.4.27-4-sparc32-smp - 2.4.27-9sarge6 kernel-headers-2.4.27-4-sparc32 - 2.4.27-9sarge6 kernel-headers-2.4.27-4-sparc64 - 2.4.27-9sarge6 kernel-headers-2.4.27-4-sparc64-smp - 2.4.27-9sarge6 kernel-headers-2.4.27-4 - 2.4.27-9sarge6 kernel-headers-2.4-sparc64-smp - 42sarge3 kernel-headers-2.4.27-4-sparc32-smp - 2.4.27-9sarge6 kernel-image-2.4.27-4-sparc32 - 2.4.27-9sarge6 kernel-headers-2.4-sparc32-smp - 42sarge3 kernel-headers-2.4-sparc64 - 42sarge3 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-build-2.4.27-4 - 2.4.27-9sarge6 kernel-image-2.4.27-4-sparc64 - 2.4.27-9sarge6 kernel-headers-2.4-sparc32 - 42sarge3 kernel-image-2.4.27-4-sparc64-smp - 2.4.27-9sarge6 x86-64: mips-tools - 2.4.27-10.sarge4.040815-3 alpha: kernel-headers-2.4-generic - 101sarge3 kernel-headers-2.4.27-4-generic - 2.4.27-10sarge6 kernel-image-2.4.27-4-smp - 2.4.27-10sarge6 kernel-build-2.4.27-4 - 2.4.27-10sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4-generic - 101sarge3 kernel-headers-2.4.27-4-smp - 2.4.27-10sarge6 kernel-image-2.4-smp - 101sarge3 kernel-headers-2.4-smp - 101sarge3 kernel-image-2.4.27-4-generic - 2.4.27-10sarge6 kernel-headers-2.4.27-4 - 2.4.27-10sarge6 ia64: kernel-image-2.4-mckinley-smp - 2.4.27-10sarge6 kernel-image-2.4.27-4-mckinley-smp - 2.4.27-10sarge6 kernel-headers-2.4.27-4-itanium - 2.4.27-10sarge6 kernel-image-2.4.27-4-mckinley - 2.4.27-10sarge6 kernel-image-2.4.27-4-itanium - 2.4.27-10sarge6 kernel-headers-2.4.27-4-mckinley - 2.4.27-10sarge6 kernel-image-2.4-itanium-smp - 2.4.27-10sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27-4-itanium-smp - 2.4.27-10sarge6 kernel-image-2.4-mckinley - 2.4.27-10sarge6 kernel-headers-2.4.27-4-mckinley-smp - 2.4.27-10sarge6 kernel-image-2.4.27-4-itanium-smp - 2.4.27-10sarge6 kernel-image-2.4-itanium - 2.4.27-10sarge6 kernel-headers-2.4.27-4 - 2.4.27-10sarge6 kernel-build-2.4.27-4 - 2.4.27-10sarge6 mips: kernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge4.040815-3 noarch: i2c-source - 2.9.1-1sarge2 kernel-doc-2.4.27-speakup - 2.4.27-1.1sarge5 systemimager-server - 3.2.3-6sarge5 kernel-patch-debian-2.4.27 - 2.4.27-10sarge6 kernel-patch-2.4-lm-sensors - 2.9.1-1sarge4 kernel-tree-2.4.27 - 2.4.27-10sarge6 kernel-source-2.4.27 - 2.4.27-10sarge6 systemimager-client - 3.2.3-6sarge5 systemimager-server-flamethrowerd - 3.2.3-6sarge5 systemimager-boot-ia64-standard - 3.2.3-6sarge5 kernel-patch-2.4-i2c - 2.9.1-1sarge2 kernel-doc-2.4.27 - 2.4.27-10sarge6 systemimager-doc - 3.2.3-6sarge5 lm-sensors-source - 2.9.1-1sarge4 systemimager-boot-i386-standard - 3.2.3-6sarge5 systemimager-common - 3.2.3-6sarge5 mipsel: kernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge4.040815-3 kernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge4.040815-3 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3 arm: kernel-image-2.4.27-bast - 2.4.27-2sarge6 kernel-image-2.4.27-lart - 2.4.27-2sarge6 kernel-build-2.4.27 - 2.4.27-2sarge6 kernel-image-2.4.27-riscpc - 2.4.27-2sarge6 kernel-headers-2.4.27 - 2.4.27-2sarge6 mips-tools - 2.4.27-10.sarge4.040815-3 kernel-image-2.4.27-netwinder - 2.4.27-2sarge6 kernel-image-2.4.27-riscstation - 2.4.27-2sarge

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 3.1 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 3.1:\n\tppc:\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-powerpc-small - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-patch-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-patch-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-patch-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-apus - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-nubus - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-powerpc - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-powerpc-small - 2.4.27-10sarge6\n\ts390x:\n\t\tkernel-image-2.4.27-4-s390-tape - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-4-s390x - 2.4.27-2sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-2sarge6\n\t\tkernel-headers-2.4-s390 - 2.4.27-1sarge2\n\t\tkernel-image-2.4-s390x - 2.4.27-1sarge2\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-4-s390 - 2.4.27-2sarge6\n\t\tkernel-image-2.4-s390 - 2.4.27-1sarge2\n\tm68k:\n\t\tkernel-image-2.4.27-amiga - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-mac - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-mvme16x - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-mvme147 - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-bvme6000 - 2.4.27-3sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-atari - 2.4.27-3sarge6\n\t\tkernel-image-2.4.27-q40 - 2.4.27-3sarge6\n\ti686:\n\t\tkernel-image-2.4-k7 - 101sarge2\n\t\ti2c-2.4.27-4-386 - 2.9.1-1sarge2\n\t\tkernel-pcmcia-modules-2.4.27-4-k7-smp - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4.27-4-k7 - 2.4.27-10sarge6\n\t\tkernel-headers-2.4-686 - 101sarge2\n\t\ti2c-2.4.27-4-k7 - 2.9.1-1sarge2\n\t\tkernel-image-2.4.27-speakup - 2.4.27-1.1sarge5\n\t\tkernel-headers-2.4-386 - 101sarge2\n\t\thostap-modules-2.6.8-4-686 - 0.3.7-1sarge3\n\t\tkernel-image-2.4-k7-smp - 101sarge2\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27-4-386 - 2.4.27-10sarge6\n\t\tpcmcia-modules-2.4.27-4-586tsc - 3.2.5+2sarge2\n\t\tlm-sensors-2.4.27-4-k6 - 2.9.1-1sarge4\n\t\tkernel-image-2.4.27-4-k7-smp - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4-686 - 101sarge2\n\t\tkernel-image-2.4.27-4-686 - 2.4.27-10sarge6\n\t\tpcmcia-modules-2.4.27-4-k6 - 3.2.5+2sarge2\n\t\tlm-sensors-2.4.27-4-386 - 2.9.1-1sarge4\n\t\tkernel-headers-2.4-k7-smp - 101sarge2\n\t\tkernel-image-2.4-586tsc - 101sarge2\n\t\tlm-sensors-2.4.27-4-686-smp - 2.9.1-1sarge4\n\t\tlibsensors3 - 2.9.1-1sarge4\n\t\tkernel-headers-2.4.27-4-586tsc - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-10sarge6\n\t\tkernel-image-2.4-686 - 101sarge2\n\t\tkernel-image-2.4-386 - 101sarge2\n\t\tkernel-headers-2.4-k6 - 101sarge2\n\t\tkernel-pcmcia-modules-2.4-686-smp - 101sarge2\n\t\tkernel-pcmcia-modules-2.4-386 - 101sarge2\n\t\ti2c-2.4.27-4-k7-smp - 2.9.1-1sarge2\n\t\ti2c-2.4.27-4-686-smp - 2.9.1-1sarge2\n\t\ti2c-2.4.27-4-686 - 2.9.1-1sarge2\n\t\tkernel-headers-2.4-586tsc - 101sarge2\n\t\thostap-modules-2.6.8-4-686-smp - 0.3.7-1sarge3\n\t\thostap-modules-2.4.27-4-k7 - 0.3.7-1sarge3\n\t\tkernel-headers-2.4-686-smp - 101sarge2\n\t\ti2c-2.4.27-4-k6 - 2.9.1-1sarge2\n\t\tkernel-pcmcia-modules-2.4.27-4-686-smp - 2.4.27-10sarge6\n\t\thostap-modules-2.4.27-4-586tsc - 0.3.7-1sarge3\n\t\thostap-modules-2.4.27-4-686-smp - 0.3.7-1sarge3\n\t\tkernel-headers-2.4.27-4-686-smp - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4.27-4-586tsc - 2.4.27-10sarge6\n\t\tkernel-pcmcia-modules-2.4-k7-smp - 101sarge2\n\t\tkernel-headers-2.4.27-speakup - 2.4.27-1.1sarge5\n\t\tlm-sensors-2.4.27-4-686 - 2.9.1-1sarge4\n\t\thostap-modules-2.4.27-4-386 - 0.3.7-1sarge3\n\t\tkernel-image-2.4.27-4-k7 - 2.4.27-10sarge6\n\t\thostap-modules-2.6.8-4-k7 - 0.3.7-1sarge3\n\t\tkernel-image-2.4.27-4-686-smp - 2.4.27-10sarge6\n\t\thostap-modules-2.6.8-4-k7-smp - 0.3.7-1sarge3\n\t\tpcmcia-modules-2.4.27-4-k7 - 3.2.5+2sarge2\n\t\tkernel-headers-2.4.27-4-k6 - 2.4.27-10sarge6\n\t\thostap-modules-2.4.27-4-k6 - 0.3.7-1sarge3\n\t\thostap-modules-2.6.8-4-386 - 0.3.7-1sarge3\n\t\tkernel-pcmcia-modules-2.4-k7 - 101sarge2\n\t\tpcmcia-modules-2.4.27-4-k7-smp - 3.2.5+2sarge2\n\t\tkernel-headers-2.4.27-4-686 - 2.4.27-10sarge6\n\t\tpcmcia-modules-2.4.27-4-686 - 3.2.5+2sarge2\n\t\tlm-sensors-2.4.27-4-k7-smp - 2.9.1-1sarge4\n\t\tkernel-pcmcia-modules-2.4.27-4-686 - 2.4.27-10sarge6\n\t\tlibsensors-dev - 2.9.1-1sarge4\n\t\tkernel-pcmcia-modules-2.4-586tsc - 101sarge2\n\t\tkernel-headers-2.4.27-4-k7 - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-k6 - 2.4.27-10sarge6\n\t\tkernel-headers-2.4-k7 - 101sarge2\n\t\tkernel-pcmcia-modules-2.4-k6 - 101sarge2\n\t\tkernel-build-2.4.27-4 - 2.4.27-10sarge6\n\t\tkernel-image-2.4-k6 - 101sarge2\n\t\thostap-modules-2.4.27-4-686 - 0.3.7-1sarge3\n\t\tlm-sensors-2.4.27-4-k7 - 2.9.1-1sarge4\n\t\tkernel-pcmcia-modules-2.4.27-4-386 - 2.4.27-10sarge6\n\t\tlm-sensors-2.4.27-4-586tsc - 2.9.1-1sarge4\n\t\tmindi-kernel - 2.4.27-2sarge5\n\t\tkernel-pcmcia-modules-2.4.27-4-k6 - 2.4.27-10sarge6\n\t\ti2c-2.4.27-4-586tsc - 2.9.1-1sarge2\n\t\tpcmcia-modules-2.4.27-4-686-smp - 3.2.5+2sarge2\n\t\tkernel-image-2.4-686-smp - 101sarge2\n\t\tlm-sensors - 2.9.1-1sarge4\n\t\tkernel-image-2.4.27-4-386 - 2.4.27-10sarge6\n\t\tsensord - 2.9.1-1sarge4\n\t\tkernel-headers-2.4.27-4-k7-smp - 2.4.27-10sarge6\n\t\thostap-modules-2.4.27-4-k7-smp - 0.3.7-1sarge3\n\t\tpcmcia-modules-2.4.27-4-386 - 3.2.5+2sarge2\n\t\tkernel-image-2.4.27-4-586tsc - 2.4.27-10sarge6\n\thppa:\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\tsparc:\n\t\tkernel-image-2.4-sparc64-smp - 42sarge3\n\t\tkernel-image-2.4-sparc32-smp - 42sarge3\n\t\tkernel-image-2.4-sparc32 - 42sarge3\n\t\tkernel-image-2.4-sparc64 - 42sarge3\n\t\tkernel-image-2.4.27-4-sparc32-smp - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4-sparc32 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4-sparc64 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4-sparc64-smp - 2.4.27-9sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4-sparc64-smp - 42sarge3\n\t\tkernel-headers-2.4.27-4-sparc32-smp - 2.4.27-9sarge6\n\t\tkernel-image-2.4.27-4-sparc32 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4-sparc32-smp - 42sarge3\n\t\tkernel-headers-2.4-sparc64 - 42sarge3\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-build-2.4.27-4 - 2.4.27-9sarge6\n\t\tkernel-image-2.4.27-4-sparc64 - 2.4.27-9sarge6\n\t\tkernel-headers-2.4-sparc32 - 42sarge3\n\t\tkernel-image-2.4.27-4-sparc64-smp - 2.4.27-9sarge6\n\tx86-64:\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\talpha:\n\t\tkernel-headers-2.4-generic - 101sarge3\n\t\tkernel-headers-2.4.27-4-generic - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-smp - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-4 - 2.4.27-10sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4-generic - 101sarge3\n\t\tkernel-headers-2.4.27-4-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4-smp - 101sarge3\n\t\tkernel-headers-2.4-smp - 101sarge3\n\t\tkernel-image-2.4.27-4-generic - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-10sarge6\n\tia64:\n\t\tkernel-image-2.4-mckinley-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-mckinley-smp - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4-itanium - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-mckinley - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-itanium - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4-mckinley - 2.4.27-10sarge6\n\t\tkernel-image-2.4-itanium-smp - 2.4.27-10sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27-4-itanium-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4-mckinley - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4-mckinley-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4.27-4-itanium-smp - 2.4.27-10sarge6\n\t\tkernel-image-2.4-itanium - 2.4.27-10sarge6\n\t\tkernel-headers-2.4.27-4 - 2.4.27-10sarge6\n\t\tkernel-build-2.4.27-4 - 2.4.27-10sarge6\n\tmips:\n\t\tkernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge4.040815-3\n\tnoarch:\n\t\ti2c-source - 2.9.1-1sarge2\n\t\tkernel-doc-2.4.27-speakup - 2.4.27-1.1sarge5\n\t\tsystemimager-server - 3.2.3-6sarge5\n\t\tkernel-patch-debian-2.4.27 - 2.4.27-10sarge6\n\t\tkernel-patch-2.4-lm-sensors - 2.9.1-1sarge4\n\t\tkernel-tree-2.4.27 - 2.4.27-10sarge6\n\t\tkernel-source-2.4.27 - 2.4.27-10sarge6\n\t\tsystemimager-client - 3.2.3-6sarge5\n\t\tsystemimager-server-flamethrowerd - 3.2.3-6sarge5\n\t\tsystemimager-boot-ia64-standard - 3.2.3-6sarge5\n\t\tkernel-patch-2.4-i2c - 2.9.1-1sarge2\n\t\tkernel-doc-2.4.27 - 2.4.27-10sarge6\n\t\tsystemimager-doc - 3.2.3-6sarge5\n\t\tlm-sensors-source - 2.9.1-1sarge4\n\t\tsystemimager-boot-i386-standard - 3.2.3-6sarge5\n\t\tsystemimager-common - 3.2.3-6sarge5\n\tmipsel:\n\t\tkernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge4.040815-3\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge4.040815-3\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge4.040815-3\n\tarm:\n\t\tkernel-image-2.4.27-bast - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-lart - 2.4.27-2sarge6\n\t\tkernel-build-2.4.27 - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-riscpc - 2.4.27-2sarge6\n\t\tkernel-headers-2.4.27 - 2.4.27-2sarge6\n\t\tmips-tools - 2.4.27-10.sarge4.040815-3\n\t\tkernel-image-2.4.27-netwinder - 2.4.27-2sarge6\n\t\tkernel-image-2.4.27-riscstation - 2.4.27-2sarge",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03629",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2004-2731, CVE-2006-4814, CVE-2006-5753, CVE-2006-5823, CVE-2006-6053, CVE-2006-6054, CVE-2006-6106, CVE-2007-1353, CVE-2007-1592, CVE-2007-2172, CVE-2007-2525, CVE-2007-3848, CVE-2007-4308, CVE-2007-4311, CVE-2007-5093, CVE-2007-6063, CVE-2007-6151, CVE-2007-6206, CVE-2007-6694, CVE-2008-0007, DSA-1503, ID:1402392",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0447\u0438\u0441\u0435\u043b (CWE-189)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 kernel-image-2.4.27-4-smp \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1503/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5823\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0007\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1592\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3848\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2731\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6206\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6063\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6151\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2172\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4308\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5093\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4311\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6054\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6053\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2525\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5753\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6694\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4814\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1353",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-189",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2004-2731 (GCVE-0-2004-2731)

Vulnerability from cvelistv5 – Published: 2007-10-09 10:00 – Updated: 2024-08-08 01:36

Summary

Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
http://secunia.com/advisories/11981	third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/7345	vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1010617	vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/8363	vdb-entryx_refsource_OSVDB
http://archives.neohapsis.com/archives/bugtraq/20…	mailing-listx_refsource_BUGTRAQ
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.securiteam.com/unixfocus/5GP0515DFW.html	x_refsource_MISC
http://www.securityfocus.com/bid/10632	vdb-entryx_refsource_BID

Date Public

2004-06-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:36:25.301Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "11981",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/11981"
          },
          {
            "name": "7345",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/7345"
          },
          {
            "name": "1010617",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1010617"
          },
          {
            "name": "8363",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/8363"
          },
          {
            "name": "20040629 linux kernel Sbus PROM driver multiple integer overflows",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securiteam.com/unixfocus/5GP0515DFW.html"
          },
          {
            "name": "10632",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/10632"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-06-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2008-02-26T10:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "11981",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/11981"
        },
        {
          "name": "7345",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/7345"
        },
        {
          "name": "1010617",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1010617"
        },
        {
          "name": "8363",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/8363"
        },
        {
          "name": "20040629 linux kernel Sbus PROM driver multiple integer overflows",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securiteam.com/unixfocus/5GP0515DFW.html"
        },
        {
          "name": "10632",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/10632"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-2731",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "11981",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/11981"
            },
            {
              "name": "7345",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/7345"
            },
            {
              "name": "1010617",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1010617"
            },
            {
              "name": "8363",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/8363"
            },
            {
              "name": "20040629 linux kernel Sbus PROM driver multiple integer overflows",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "http://www.securiteam.com/unixfocus/5GP0515DFW.html",
              "refsource": "MISC",
              "url": "http://www.securiteam.com/unixfocus/5GP0515DFW.html"
            },
            {
              "name": "10632",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/10632"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-2731",
    "datePublished": "2007-10-09T10:00:00.000Z",
    "dateReserved": "2007-10-08T00:00:00.000Z",
    "dateUpdated": "2024-08-08T01:36:25.301Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-4814 (GCVE-0-2006-4814)

Vulnerability from cvelistv5 – Published: 2006-12-20 02:00 – Updated: 2024-08-07 19:23

Summary

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

31 references

URL	Tags
http://www.trustix.org/errata/2007/0002/	vendor-advisoryx_refsource_TRUSTIX
http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23609	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/23436	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/21663	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/24100	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/30110	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2222…	vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/5082	vdb-entryx_refsource_VUPEN
http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/24482	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1304	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2008-02…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/25714	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://lists.vmware.com/pipermail/security-announ…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/31246	third-party-advisoryx_refsource_SECUNIA

Date Public

2006-12-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:23:41.172Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "2007-0002",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0002/"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "23609",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23609"
          },
          {
            "name": "oval:org.mitre.oval:def:9648",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "name": "23436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23436"
          },
          {
            "name": "21663",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/21663"
          },
          {
            "name": "MDKSA-2007:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "24100",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24100"
          },
          {
            "name": "30110",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30110"
          },
          {
            "name": "ADV-2008-2222",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2222/references"
          },
          {
            "name": "ADV-2006-5082",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/5082"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "24482",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24482"
          },
          {
            "name": "SUSE-SA:2007:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "RHSA-2008:0211",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "name": "MDKSA-2007:060",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
          },
          {
            "name": "31246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31246"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-12-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "2007-0002",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0002/"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "23609",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23609"
        },
        {
          "name": "oval:org.mitre.oval:def:9648",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "name": "23436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23436"
        },
        {
          "name": "21663",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/21663"
        },
        {
          "name": "MDKSA-2007:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "24100",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24100"
        },
        {
          "name": "30110",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30110"
        },
        {
          "name": "ADV-2008-2222",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2222/references"
        },
        {
          "name": "ADV-2006-5082",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/5082"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "24482",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24482"
        },
        {
          "name": "SUSE-SA:2007:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "RHSA-2008:0211",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0211.html"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "name": "MDKSA-2007:060",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
        },
        {
          "name": "31246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31246"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-4814",
    "datePublished": "2006-12-20T02:00:00.000Z",
    "dateReserved": "2006-09-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:23:41.172Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-5753 (GCVE-0-2006-5753)

Vulnerability from cvelistv5 – Published: 2007-01-30 19:00 – Updated: 2024-08-07 20:04

Summary

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges via unknown vectors.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

33 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2007-00…	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/22316	vdb-entryx_refsource_BID
http://secunia.com/advisories/24429	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24400	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://fedoranews.org/cms/node/2739	vendor-advisoryx_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/24100	third-party-advisoryx_refsource_SECUNIA
http://fedoranews.org/cms/node/2740	vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/25226	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25683	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/24482	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://osvdb.org/33020	vdb-entryx_refsource_OSVDB
http://lkml.org/lkml/2007/1/3/150	x_refsource_MISC
http://secunia.com/advisories/24547	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1304	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/25714	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://issues.rpath.com/browse/RPL-1106	x_refsource_CONFIRM
http://secunia.com/advisories/23955	third-party-advisoryx_refsource_SECUNIA

Date Public

2007-01-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:04:55.441Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0014.html"
          },
          {
            "name": "oval:org.mitre.oval:def:9371",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9371"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "22316",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22316"
          },
          {
            "name": "24429",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24429"
          },
          {
            "name": "24400",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24400"
          },
          {
            "name": "SUSE-SA:2007:021",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_21_kernel.html"
          },
          {
            "name": "FEDORA-2007-277",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://fedoranews.org/cms/node/2739"
          },
          {
            "name": "MDKSA-2007:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "24100",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24100"
          },
          {
            "name": "FEDORA-2007-291",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://fedoranews.org/cms/node/2740"
          },
          {
            "name": "25226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25226"
          },
          {
            "name": "25683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25683"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "24482",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24482"
          },
          {
            "name": "SUSE-SA:2007:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "33020",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/33020"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lkml.org/lkml/2007/1/3/150"
          },
          {
            "name": "24547",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24547"
          },
          {
            "name": "SUSE-SA:2007:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "SUSE-SA:2007:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "name": "MDKSA-2007:060",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1106"
          },
          {
            "name": "23955",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23955"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-01-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the listxattr system call in Linux kernel, when a \"bad inode\" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0014.html"
        },
        {
          "name": "oval:org.mitre.oval:def:9371",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9371"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "22316",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22316"
        },
        {
          "name": "24429",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24429"
        },
        {
          "name": "24400",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24400"
        },
        {
          "name": "SUSE-SA:2007:021",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_21_kernel.html"
        },
        {
          "name": "FEDORA-2007-277",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://fedoranews.org/cms/node/2739"
        },
        {
          "name": "MDKSA-2007:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "24100",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24100"
        },
        {
          "name": "FEDORA-2007-291",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://fedoranews.org/cms/node/2740"
        },
        {
          "name": "25226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25226"
        },
        {
          "name": "25683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25683"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "24482",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24482"
        },
        {
          "name": "SUSE-SA:2007:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "33020",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/33020"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lkml.org/lkml/2007/1/3/150"
        },
        {
          "name": "24547",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24547"
        },
        {
          "name": "SUSE-SA:2007:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "SUSE-SA:2007:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "name": "MDKSA-2007:060",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1106"
        },
        {
          "name": "23955",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23955"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-5753",
    "datePublished": "2007-01-30T19:00:00.000Z",
    "dateReserved": "2006-11-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T20:04:55.441Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-5823 (GCVE-0-2006-5823)

Vulnerability from cvelistv5 – Published: 2006-11-09 11:00 – Updated: 2024-08-07 20:04

Summary

The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

22 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2007-0436.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/24259	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisoryx_refsource_REDHAT
http://projects.info-pull.com/mokb/MOKB-07-11-2006.html	x_refsource_MISC
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/22767	third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23474	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/24482	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25630	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public

2006-11-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:04:55.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "SUSE-SA:2006:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
          },
          {
            "name": "24259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24259"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://projects.info-pull.com/mokb/MOKB-07-11-2006.html"
          },
          {
            "name": "MDKSA-2007:047",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:047"
          },
          {
            "name": "22767",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22767"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "oval:org.mitre.oval:def:10588",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10588"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "23474",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23474"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "24482",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24482"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "25630",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25630"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "name": "MDKSA-2007:060",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-11-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "SUSE-SA:2006:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
        },
        {
          "name": "24259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24259"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://projects.info-pull.com/mokb/MOKB-07-11-2006.html"
        },
        {
          "name": "MDKSA-2007:047",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:047"
        },
        {
          "name": "22767",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22767"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "oval:org.mitre.oval:def:10588",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10588"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "23474",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23474"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "24482",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24482"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "25630",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25630"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "name": "MDKSA-2007:060",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-5823",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0436",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
            },
            {
              "name": "24098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24098"
            },
            {
              "name": "SUSE-SA:2006:079",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
            },
            {
              "name": "24259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24259"
            },
            {
              "name": "RHSA-2007:0014",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
            },
            {
              "name": "http://projects.info-pull.com/mokb/MOKB-07-11-2006.html",
              "refsource": "MISC",
              "url": "http://projects.info-pull.com/mokb/MOKB-07-11-2006.html"
            },
            {
              "name": "MDKSA-2007:047",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:047"
            },
            {
              "name": "22767",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22767"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
            },
            {
              "name": "USN-416-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-416-1"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "oval:org.mitre.oval:def:10588",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10588"
            },
            {
              "name": "24206",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24206"
            },
            {
              "name": "23474",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23474"
            },
            {
              "name": "23997",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23997"
            },
            {
              "name": "20070615 rPSA-2007-0124-1 kernel xen",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/471457"
            },
            {
              "name": "24482",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24482"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "25630",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25630"
            },
            {
              "name": "25691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25691"
            },
            {
              "name": "MDKSA-2007:060",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-5823",
    "datePublished": "2006-11-09T11:00:00.000Z",
    "dateReserved": "2006-11-08T00:00:00.000Z",
    "dateUpdated": "2024-08-07T20:04:55.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-6053 (GCVE-0-2006-6053)

Vulnerability from cvelistv5 – Published: 2006-11-22 01:00 – Updated: 2024-08-07 20:12

Summary

The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

22 references

URL	Tags
http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.vupen.com/english/advisories/2006/4458	vdb-entryx_refsource_VUPEN
http://projects.info-pull.com/mokb/MOKB-10-11-2006.html	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/24100	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23474	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/24482	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1304	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/25714	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22776	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA

Date Public

2006-11-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:12:31.257Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "SUSE-SA:2006:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
          },
          {
            "name": "ADV-2006-4458",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4458"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://projects.info-pull.com/mokb/MOKB-10-11-2006.html"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "name": "MDKSA-2007:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "24100",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24100"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "23474",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23474"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "24482",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24482"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "oval:org.mitre.oval:def:10992",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10992"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "name": "22776",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22776"
          },
          {
            "name": "MDKSA-2007:060",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-11-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "SUSE-SA:2006:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
        },
        {
          "name": "ADV-2006-4458",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4458"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://projects.info-pull.com/mokb/MOKB-10-11-2006.html"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "name": "MDKSA-2007:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "24100",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24100"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "23474",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23474"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "24482",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24482"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "oval:org.mitre.oval:def:10992",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10992"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "name": "22776",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22776"
        },
        {
          "name": "MDKSA-2007:060",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6053",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "24098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24098"
            },
            {
              "name": "SUSE-SA:2006:079",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
            },
            {
              "name": "ADV-2006-4458",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4458"
            },
            {
              "name": "http://projects.info-pull.com/mokb/MOKB-10-11-2006.html",
              "refsource": "MISC",
              "url": "http://projects.info-pull.com/mokb/MOKB-10-11-2006.html"
            },
            {
              "name": "RHSA-2007:0014",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
            },
            {
              "name": "MDKSA-2007:040",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:040"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
            },
            {
              "name": "USN-416-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-416-1"
            },
            {
              "name": "24100",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24100"
            },
            {
              "name": "24206",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24206"
            },
            {
              "name": "23474",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23474"
            },
            {
              "name": "23997",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23997"
            },
            {
              "name": "20070615 rPSA-2007-0124-1 kernel xen",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/471457"
            },
            {
              "name": "24482",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24482"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "oval:org.mitre.oval:def:10992",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10992"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "DSA-1304",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1304"
            },
            {
              "name": "25714",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25714"
            },
            {
              "name": "25691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25691"
            },
            {
              "name": "22776",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22776"
            },
            {
              "name": "MDKSA-2007:060",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:060"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-6053",
    "datePublished": "2006-11-22T01:00:00.000Z",
    "dateReserved": "2006-11-21T00:00:00.000Z",
    "dateUpdated": "2024-08-07T20:12:31.257Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-6054 (GCVE-0-2006-6054)

Vulnerability from cvelistv5 – Published: 2006-11-22 01:00 – Updated: 2024-08-07 20:12

Summary

The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

25 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2007-0436.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisoryx_refsource_REDHAT
http://www.vupen.com/english/advisories/2006/4487	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/27528	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/23474	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22837	third-party-advisoryx_refsource_SECUNIA
http://projects.info-pull.com/mokb/MOKB-12-11-2006.html	x_refsource_MISC
http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25630	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM

Date Public

2006-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:12:31.367Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "SUSE-SA:2006:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "name": "ADV-2006-4487",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4487"
          },
          {
            "name": "oval:org.mitre.oval:def:10006",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "23474",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23474"
          },
          {
            "name": "22837",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22837"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "kernel-ext2-filesystem-dos(30201)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30201"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "25630",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25630"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "SUSE-SA:2006:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "name": "ADV-2006-4487",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4487"
        },
        {
          "name": "oval:org.mitre.oval:def:10006",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "23474",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23474"
        },
        {
          "name": "22837",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22837"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "kernel-ext2-filesystem-dos(30201)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30201"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "25630",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25630"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6054",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0436",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
            },
            {
              "name": "24098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24098"
            },
            {
              "name": "SUSE-SA:2006:079",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "RHSA-2007:0014",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
            },
            {
              "name": "ADV-2006-4487",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4487"
            },
            {
              "name": "oval:org.mitre.oval:def:10006",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
            },
            {
              "name": "USN-416-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-416-1"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "24206",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24206"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "23474",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23474"
            },
            {
              "name": "22837",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22837"
            },
            {
              "name": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html",
              "refsource": "MISC",
              "url": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html"
            },
            {
              "name": "23997",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23997"
            },
            {
              "name": "20070615 rPSA-2007-0124-1 kernel xen",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/471457"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "kernel-ext2-filesystem-dos(30201)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30201"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "25630",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25630"
            },
            {
              "name": "25691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25691"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-6054",
    "datePublished": "2006-11-22T01:00:00.000Z",
    "dateReserved": "2006-11-21T00:00:00.000Z",
    "dateUpdated": "2024-08-07T20:12:31.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-6106 (GCVE-0-2006-6106)

Vulnerability from cvelistv5 – Published: 2006-12-19 19:00 – Updated: 2024-08-07 20:12

Summary

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

41 references

URL	Tags
http://www.trustix.org/errata/2007/0002/	vendor-advisoryx_refsource_TRUSTIX
http://secunia.com/advisories/24098	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/5037	vdb-entryx_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/27227	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/23609	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/23593	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/24105	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25226	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23408	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/23752	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25683	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24206	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/459615/100…	mailing-listx_refsource_BUGTRAQ
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	x_refsource_MISC
http://secunia.com/advisories/23997	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-listx_refsource_BUGTRAQ
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/24547	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=116648929829440&w=2	mailing-listx_refsource_MLIST
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1304	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/25714	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/21604	vdb-entryx_refsource_BID
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog…	x_refsource_CONFIRM
http://secunia.com/advisories/23427	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25691	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-848	x_refsource_CONFIRM
http://marc.info/?l=linux-kernel&m=116614741607528&w=2	mailing-listx_refsource_MLIST

Date Public

2006-12-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:12:31.672Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "2007-0002",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0002/"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "ADV-2006-5037",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/5037"
          },
          {
            "name": "MDKSA-2007:025",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025"
          },
          {
            "name": "27227",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27227"
          },
          {
            "name": "oval:org.mitre.oval:def:10891",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10891"
          },
          {
            "name": "SUSE-SA:2007:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
          },
          {
            "name": "23609",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23609"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "name": "MDKSA-2007:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012"
          },
          {
            "name": "23593",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23593"
          },
          {
            "name": "SUSE-SA:2007:021",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_21_kernel.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "24105",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24105"
          },
          {
            "name": "25226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25226"
          },
          {
            "name": "23408",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23408"
          },
          {
            "name": "23752",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23752"
          },
          {
            "name": "25683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25683"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "20070209 rPSA-2007-0031-1 kernel",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/459615/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218602"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "SUSE-SA:2007:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "24547",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24547"
          },
          {
            "name": "[linux-kernel] 20061219 Linux 2.6.18.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=116648929829440\u0026w=2"
          },
          {
            "name": "MDKSA-2007:002",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002"
          },
          {
            "name": "SUSE-SA:2007:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "kernel-cmtprecvinteropmsg-bo(30912)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30912"
          },
          {
            "name": "21604",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/21604"
          },
          {
            "name": "SUSE-SA:2007:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5"
          },
          {
            "name": "23427",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23427"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-848"
          },
          {
            "name": "[linux-kernel] 20061215 [patch 24/24] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=116614741607528\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-12-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-17T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "2007-0002",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0002/"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "ADV-2006-5037",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/5037"
        },
        {
          "name": "MDKSA-2007:025",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:025"
        },
        {
          "name": "27227",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27227"
        },
        {
          "name": "oval:org.mitre.oval:def:10891",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10891"
        },
        {
          "name": "SUSE-SA:2007:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_53_kernel.html"
        },
        {
          "name": "23609",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23609"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "name": "MDKSA-2007:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:012"
        },
        {
          "name": "23593",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23593"
        },
        {
          "name": "SUSE-SA:2007:021",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_21_kernel.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "24105",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24105"
        },
        {
          "name": "25226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25226"
        },
        {
          "name": "23408",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23408"
        },
        {
          "name": "23752",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23752"
        },
        {
          "name": "25683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25683"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "20070209 rPSA-2007-0031-1 kernel",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/459615/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218602"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "SUSE-SA:2007:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_18_kernel.html"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "24547",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24547"
        },
        {
          "name": "[linux-kernel] 20061219 Linux 2.6.18.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=116648929829440\u0026w=2"
        },
        {
          "name": "MDKSA-2007:002",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:002"
        },
        {
          "name": "SUSE-SA:2007:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "kernel-cmtprecvinteropmsg-bo(30912)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30912"
        },
        {
          "name": "21604",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/21604"
        },
        {
          "name": "SUSE-SA:2007:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5"
        },
        {
          "name": "23427",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23427"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-848"
        },
        {
          "name": "[linux-kernel] 20061215 [patch 24/24] Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=116614741607528\u0026w=2"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-6106",
    "datePublished": "2006-12-19T19:00:00.000Z",
    "dateReserved": "2006-11-24T00:00:00.000Z",
    "dateUpdated": "2024-08-07T20:12:31.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-1353 (GCVE-0-2007-1353)

Vulnerability from cvelistv5 – Published: 2007-04-24 16:00 – Updated: 2024-08-07 12:50

Summary

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

31 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.vupen.com/english/advisories/2007/1495	vdb-entryx_refsource_VUPEN
http://www.ubuntu.com/usn/usn-470-1	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26289	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27528	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25838	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1356	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/25683	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-489-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/26478	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/24976	third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25596	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
https://rhn.redhat.com/errata/RHSA-2007-0376.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-486-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/26450	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/25700	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26139	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/23594	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2007-0488.html	vendor-advisoryx_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/26133	third-party-advisoryx_refsource_SECUNIA

Date Public

2007-04-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:50:35.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:10626",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626"
          },
          {
            "name": "ADV-2007-1495",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1495"
          },
          {
            "name": "USN-470-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-470-1"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "26289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26289"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "name": "25838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25838"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "name": "25683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25683"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "USN-489-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-489-1"
          },
          {
            "name": "26478",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26478"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "24976",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24976"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
          },
          {
            "name": "RHSA-2007:0671",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "25596",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25596"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3"
          },
          {
            "name": "RHSA-2007:0376",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
          },
          {
            "name": "USN-486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-486-1"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "name": "SUSE-SA:2007:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
          },
          {
            "name": "25700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25700"
          },
          {
            "name": "26139",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26139"
          },
          {
            "name": "23594",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23594"
          },
          {
            "name": "RHSA-2007:0488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          },
          {
            "name": "26133",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26133"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-04-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:10626",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626"
        },
        {
          "name": "ADV-2007-1495",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1495"
        },
        {
          "name": "USN-470-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-470-1"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "26289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26289"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "name": "25838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25838"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "name": "25683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25683"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "USN-489-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-489-1"
        },
        {
          "name": "26478",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26478"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "24976",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24976"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
        },
        {
          "name": "RHSA-2007:0671",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "25596",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25596"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3"
        },
        {
          "name": "RHSA-2007:0376",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
        },
        {
          "name": "USN-486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-486-1"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "name": "SUSE-SA:2007:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
        },
        {
          "name": "25700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25700"
        },
        {
          "name": "26139",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26139"
        },
        {
          "name": "23594",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23594"
        },
        {
          "name": "RHSA-2007:0488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        },
        {
          "name": "26133",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26133"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-1353",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:10626",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626"
            },
            {
              "name": "ADV-2007-1495",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1495"
            },
            {
              "name": "USN-470-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-470-1"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "26289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26289"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "25838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25838"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "DSA-1356",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1356"
            },
            {
              "name": "25683",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25683"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "USN-489-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-489-1"
            },
            {
              "name": "26478",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26478"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "24976",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24976"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
            },
            {
              "name": "RHSA-2007:0671",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "25596",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25596"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3"
            },
            {
              "name": "RHSA-2007:0376",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
            },
            {
              "name": "USN-486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-486-1"
            },
            {
              "name": "26450",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26450"
            },
            {
              "name": "SUSE-SA:2007:035",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
            },
            {
              "name": "25700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25700"
            },
            {
              "name": "26139",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26139"
            },
            {
              "name": "23594",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23594"
            },
            {
              "name": "RHSA-2007:0488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            },
            {
              "name": "26133",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26133"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-1353",
    "datePublished": "2007-04-24T16:00:00.000Z",
    "dateReserved": "2007-03-08T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:50:35.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-1592 (GCVE-0-2007-1592)

Vulnerability from cvelistv5 – Published: 2007-03-22 19:00 – Updated: 2024-08-07 12:59

Summary

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

38 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2007-0436.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2007/dsa-1286	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2007-03…	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=linux-netdev&m=117406721731891&w=2	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/usn-464-1	vendor-advisoryx_refsource_UBUNTU
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/24777	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/23104	vdb-entryx_refsource_BID
http://secunia.com/advisories/27528	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25226	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.com/archive/suse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/24618	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25683	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1084	vdb-entryx_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/25288	third-party-advisoryx_refsource_SECUNIA
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?…	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2007-06…	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHBA-2007-0304.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/25099	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25961	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/25078	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25392	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1304	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/25630	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25714	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://git.kernel.org/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM

Date Public

2007-03-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:59:08.976Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
          },
          {
            "name": "DSA-1286",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1286"
          },
          {
            "name": "RHSA-2007:0347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
          },
          {
            "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-netdev\u0026m=117406721731891\u0026w=2"
          },
          {
            "name": "USN-464-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-464-1"
          },
          {
            "name": "SUSE-SA:2007:043",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html"
          },
          {
            "name": "MDKSA-2007:078",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "24777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24777"
          },
          {
            "name": "23104",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23104"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "name": "25226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25226"
          },
          {
            "name": "SUSE-SA:2007:029",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html"
          },
          {
            "name": "24618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24618"
          },
          {
            "name": "25683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25683"
          },
          {
            "name": "ADV-2007-1084",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1084"
          },
          {
            "name": "MDVSA-2011:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051"
          },
          {
            "name": "25288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25288"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "RHBA-2007-0304",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
          },
          {
            "name": "25099",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25099"
          },
          {
            "name": "25961",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25961"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "25078",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25078"
          },
          {
            "name": "25392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25392"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4"
          },
          {
            "name": "SUSE-SA:2007:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "25630",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25630"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "kernel-tcpv6synrecvsoc-dos(33176)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176"
          },
          {
            "name": "SUSE-SA:2007:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10130",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
        },
        {
          "name": "DSA-1286",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1286"
        },
        {
          "name": "RHSA-2007:0347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
        },
        {
          "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-netdev\u0026m=117406721731891\u0026w=2"
        },
        {
          "name": "USN-464-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-464-1"
        },
        {
          "name": "SUSE-SA:2007:043",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html"
        },
        {
          "name": "MDKSA-2007:078",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "24777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24777"
        },
        {
          "name": "23104",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23104"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "name": "25226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25226"
        },
        {
          "name": "SUSE-SA:2007:029",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html"
        },
        {
          "name": "24618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24618"
        },
        {
          "name": "25683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25683"
        },
        {
          "name": "ADV-2007-1084",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1084"
        },
        {
          "name": "MDVSA-2011:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051"
        },
        {
          "name": "25288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25288"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "RHBA-2007-0304",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
        },
        {
          "name": "25099",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25099"
        },
        {
          "name": "25961",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25961"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "25078",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25078"
        },
        {
          "name": "25392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25392"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4"
        },
        {
          "name": "SUSE-SA:2007:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "25630",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25630"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "kernel-tcpv6synrecvsoc-dos(33176)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176"
        },
        {
          "name": "SUSE-SA:2007:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10130",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1592",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0436",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
            },
            {
              "name": "DSA-1286",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1286"
            },
            {
              "name": "RHSA-2007:0347",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
            },
            {
              "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-netdev\u0026m=117406721731891\u0026w=2"
            },
            {
              "name": "USN-464-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-464-1"
            },
            {
              "name": "SUSE-SA:2007:043",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html"
            },
            {
              "name": "MDKSA-2007:078",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "24777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24777"
            },
            {
              "name": "23104",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23104"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "25226",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25226"
            },
            {
              "name": "SUSE-SA:2007:029",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html"
            },
            {
              "name": "24618",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24618"
            },
            {
              "name": "25683",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25683"
            },
            {
              "name": "ADV-2007-1084",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1084"
            },
            {
              "name": "MDVSA-2011:051",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051"
            },
            {
              "name": "25288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25288"
            },
            {
              "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478",
              "refsource": "MISC",
              "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "RHBA-2007-0304",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
            },
            {
              "name": "25099",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25099"
            },
            {
              "name": "25961",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25961"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "25078",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25078"
            },
            {
              "name": "25392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25392"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4"
            },
            {
              "name": "SUSE-SA:2007:030",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "DSA-1304",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1304"
            },
            {
              "name": "25630",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25630"
            },
            {
              "name": "25714",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25714"
            },
            {
              "name": "kernel-tcpv6synrecvsoc-dos(33176)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176"
            },
            {
              "name": "SUSE-SA:2007:035",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10130",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1592",
    "datePublished": "2007-03-22T19:00:00.000Z",
    "dateReserved": "2007-03-22T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:59:08.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2007-2172 (GCVE-0-2007-2172)

Vulnerability from cvelistv5 – Published: 2007-04-22 19:00 – Updated: 2024-08-07 13:23

Summary

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

32 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2007-03…	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/usn-464-1	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2007-10…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/27913	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1363	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/26289	third-party-advisoryx_refsource_SECUNIA
http://www.mail-archive.com/git-commits-head%40vg…	x_refsource_CONFIRM
http://secunia.com/advisories/25838	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1504	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1356	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/26647	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.kernel.org/pub/linux/kernel/v2.4/Chang…	x_refsource_CONFIRM
http://secunia.com/advisories/33280	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25288	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26620	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/25068	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisoryx_refsource_DEBIAN
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/25392	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/29058	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-07…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26450	third-party-advisoryx_refsource_SECUNIA
http://kernel.org/pub/linux/kernel/v2.6/testing/C…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/23447	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/2690	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2007-0488.html	vendor-advisoryx_refsource_REDHAT
http://www.mail-archive.com/git-commits-head%40vg…	x_refsource_CONFIRM

Date Public

2007-03-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:23:51.071Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
          },
          {
            "name": "USN-464-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-464-1"
          },
          {
            "name": "RHSA-2007:1049",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
          },
          {
            "name": "27913",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27913"
          },
          {
            "name": "DSA-1363",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1363"
          },
          {
            "name": "26289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26289"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html"
          },
          {
            "name": "25838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25838"
          },
          {
            "name": "MDKSA-2007:171",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "name": "26647",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26647"
          },
          {
            "name": "MDKSA-2007:216",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
          },
          {
            "name": "oval:org.mitre.oval:def:10764",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
          },
          {
            "name": "33280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33280"
          },
          {
            "name": "25288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25288"
          },
          {
            "name": "26620",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26620"
          },
          {
            "name": "kernel-dnfibprops-fibprops-dos(33979)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33979"
          },
          {
            "name": "MDKSA-2007:196",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
          },
          {
            "name": "25068",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25068"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
          },
          {
            "name": "25392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25392"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "RHSA-2008:0787",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6"
          },
          {
            "name": "23447",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23447"
          },
          {
            "name": "ADV-2007-2690",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2690"
          },
          {
            "name": "RHSA-2007:0488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
        },
        {
          "name": "USN-464-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-464-1"
        },
        {
          "name": "RHSA-2007:1049",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
        },
        {
          "name": "27913",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27913"
        },
        {
          "name": "DSA-1363",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1363"
        },
        {
          "name": "26289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26289"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html"
        },
        {
          "name": "25838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25838"
        },
        {
          "name": "MDKSA-2007:171",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "name": "26647",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26647"
        },
        {
          "name": "MDKSA-2007:216",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
        },
        {
          "name": "oval:org.mitre.oval:def:10764",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
        },
        {
          "name": "33280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33280"
        },
        {
          "name": "25288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25288"
        },
        {
          "name": "26620",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26620"
        },
        {
          "name": "kernel-dnfibprops-fibprops-dos(33979)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33979"
        },
        {
          "name": "MDKSA-2007:196",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
        },
        {
          "name": "25068",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25068"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
        },
        {
          "name": "25392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25392"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "RHSA-2008:0787",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6"
        },
        {
          "name": "23447",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23447"
        },
        {
          "name": "ADV-2007-2690",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2690"
        },
        {
          "name": "RHSA-2007:0488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-2172",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an \"out of bound access\" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0347",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
            },
            {
              "name": "USN-464-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-464-1"
            },
            {
              "name": "RHSA-2007:1049",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-1049.html"
            },
            {
              "name": "27913",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27913"
            },
            {
              "name": "DSA-1363",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1363"
            },
            {
              "name": "26289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26289"
            },
            {
              "name": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08270.html",
              "refsource": "CONFIRM",
              "url": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08270.html"
            },
            {
              "name": "25838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25838"
            },
            {
              "name": "MDKSA-2007:171",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:171"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "DSA-1356",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1356"
            },
            {
              "name": "26647",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26647"
            },
            {
              "name": "MDKSA-2007:216",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:216"
            },
            {
              "name": "oval:org.mitre.oval:def:10764",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35"
            },
            {
              "name": "33280",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33280"
            },
            {
              "name": "25288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25288"
            },
            {
              "name": "26620",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26620"
            },
            {
              "name": "kernel-dnfibprops-fibprops-dos(33979)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33979"
            },
            {
              "name": "MDKSA-2007:196",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:196"
            },
            {
              "name": "25068",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25068"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
            },
            {
              "name": "25392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25392"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "RHSA-2008:0787",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0787.html"
            },
            {
              "name": "26450",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26450"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6"
            },
            {
              "name": "23447",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23447"
            },
            {
              "name": "ADV-2007-2690",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2690"
            },
            {
              "name": "RHSA-2007:0488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
            },
            {
              "name": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08269.html",
              "refsource": "CONFIRM",
              "url": "http://www.mail-archive.com/git-commits-head@vger.kernel.org/msg08269.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-2172",
    "datePublished": "2007-04-22T19:00:00.000Z",
    "dateReserved": "2007-04-22T00:00:00.000Z",
    "dateUpdated": "2024-08-07T13:23:51.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-03629 (CVE-2004-2731)

CVE-2004-2731 (GCVE-0-2004-2731)

CVE-2006-4814 (GCVE-0-2006-4814)

CVE-2006-5753 (GCVE-0-2006-5753)

CVE-2006-5823 (GCVE-0-2006-5823)

CVE-2006-6053 (GCVE-0-2006-6053)

CVE-2006-6054 (GCVE-0-2006-6054)

CVE-2006-6106 (GCVE-0-2006-6106)

CVE-2007-1353 (GCVE-0-2007-1353)

CVE-2007-1592 (GCVE-0-2007-1592)

CVE-2007-2172 (GCVE-0-2007-2172)

Tags

Sightings

Nomenclature

Related by attack behaviour