csaf_redhat - rhsa-2007

rhsa-2007_0672

Vulnerability from csaf_redhat

Published

2007-08-08 18:16

Modified

2024-09-15 16:48

Summary

Red Hat Security Advisory: kernel security update

Notes

Topic

Updated kernel packages that fix a number of security issues are now available for Red Hat Enterprise Linux 2.1 (32-bit architectures). This security advisory has been rated as having important security impact by the Red Hat Security Response Team.

Details

The Linux kernel handles the basic functions of the operating system. These new kernel packages contain fixes for the security issues described below: * a flaw in IPv6 flow label handling that allowed a local user to cause a denial of service (crash). (CVE-2007-1592, Important) * a flaw in the ISDN CAPI subsystem that allowed a remote user to cause a denial of service or potential privilege escalation. (CVE-2007-1217, Moderate) * a flaw in the Bluetooth subsystem that allowed a local user to trigger an information leak. (CVE-2007-1353, Low) * various flaws in the supported filesystems that allowed a local privileged user to cause a denial of service. (CVE-2006-6054, CVE-2006-6058, Low) Red Hat would like to thank Ilja van Sprundel for reporting an issue fixed in this erratum. All Red Hat Enterprise Linux 2.1 users are advised to upgrade their kernels to these updated packages, which contain backported fixes to correct these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kernel packages that fix a number of security issues are now\navailable for Red Hat Enterprise Linux 2.1 (32-bit architectures).\n\nThis security advisory has been rated as having important security impact by\nthe Red Hat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Linux kernel handles the basic functions of the operating system.\n\nThese new kernel packages contain fixes for the security issues described\nbelow:\n\n* a flaw in IPv6 flow label handling that allowed a local user to cause a\ndenial of service (crash). (CVE-2007-1592, Important)\n\n* a flaw in the ISDN CAPI subsystem that allowed a remote user to cause a\ndenial of service or potential privilege escalation. (CVE-2007-1217, Moderate)\n\n* a flaw in the Bluetooth subsystem that allowed a local user to trigger an\ninformation leak. (CVE-2007-1353, Low)\n\n* various flaws in the supported filesystems that allowed a local\nprivileged user to cause a denial of service. (CVE-2006-6054, CVE-2006-6058,\nLow)\n\nRed Hat would like to thank Ilja van Sprundel for reporting an issue fixed\nin this erratum.\n\nAll Red Hat Enterprise Linux 2.1 users are advised to upgrade their kernels\nto these updated packages, which contain backported fixes to correct these\nissues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0672",
        "url": "https://access.redhat.com/errata/RHSA-2007:0672"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "217007",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=217007"
      },
      {
        "category": "external",
        "summary": "217023",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=217023"
      },
      {
        "category": "external",
        "summary": "231070",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=231070"
      },
      {
        "category": "external",
        "summary": "233483",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=233483"
      },
      {
        "category": "external",
        "summary": "234295",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=234295"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2007/rhsa-2007_0672.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel security update",
    "tracking": {
      "current_release_date": "2024-09-15T16:48:40+00:00",
      "generator": {
        "date": "2024-09-15T16:48:40+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.33.3"
        }
      },
      "id": "RHSA-2007:0672",
      "initial_release_date": "2007-08-08T18:16:00+00:00",
      "revision_history": [
        {
          "date": "2007-08-08T18:16:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2007-08-08T14:16:35+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-09-15T16:48:40+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "2.1AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "2.1ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "2.1WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:2.4.9-e.72.i686",
                "product": {
                  "name": "kernel-0:2.4.9-e.72.i686",
                  "product_id": "kernel-0:2.4.9-e.72.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.4.9-e.72?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:2.4.9-e.72.i686",
                "product": {
                  "name": "kernel-debug-0:2.4.9-e.72.i686",
                  "product_id": "kernel-debug-0:2.4.9-e.72.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-debug@2.4.9-e.72?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-smp-0:2.4.9-e.72.i686",
                "product": {
                  "name": "kernel-smp-0:2.4.9-e.72.i686",
                  "product_id": "kernel-smp-0:2.4.9-e.72.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.72?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-enterprise-0:2.4.9-e.72.i686",
                "product": {
                  "name": "kernel-enterprise-0:2.4.9-e.72.i686",
                  "product_id": "kernel-enterprise-0:2.4.9-e.72.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-enterprise@2.4.9-e.72?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-summit-0:2.4.9-e.72.i686",
                "product": {
                  "name": "kernel-summit-0:2.4.9-e.72.i686",
                  "product_id": "kernel-summit-0:2.4.9-e.72.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-summit@2.4.9-e.72?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:2.4.9-e.72.athlon",
                "product": {
                  "name": "kernel-0:2.4.9-e.72.athlon",
                  "product_id": "kernel-0:2.4.9-e.72.athlon",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.4.9-e.72?arch=athlon"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-smp-0:2.4.9-e.72.athlon",
                "product": {
                  "name": "kernel-smp-0:2.4.9-e.72.athlon",
                  "product_id": "kernel-smp-0:2.4.9-e.72.athlon",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-smp@2.4.9-e.72?arch=athlon"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "athlon"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-doc-0:2.4.9-e.72.i386",
                "product": {
                  "name": "kernel-doc-0:2.4.9-e.72.i386",
                  "product_id": "kernel-doc-0:2.4.9-e.72.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-doc@2.4.9-e.72?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-BOOT-0:2.4.9-e.72.i386",
                "product": {
                  "name": "kernel-BOOT-0:2.4.9-e.72.i386",
                  "product_id": "kernel-BOOT-0:2.4.9-e.72.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-BOOT@2.4.9-e.72?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:2.4.9-e.72.i386",
                "product": {
                  "name": "kernel-headers-0:2.4.9-e.72.i386",
                  "product_id": "kernel-headers-0:2.4.9-e.72.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-headers@2.4.9-e.72?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-0:2.4.9-e.72.i386",
                "product": {
                  "name": "kernel-source-0:2.4.9-e.72.i386",
                  "product_id": "kernel-source-0:2.4.9-e.72.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-source@2.4.9-e.72?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-0:2.4.9-e.72.src",
                "product": {
                  "name": "kernel-0:2.4.9-e.72.src",
                  "product_id": "kernel-0:2.4.9-e.72.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel@2.4.9-e.72?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-0:2.4.9-e.72.athlon"
        },
        "product_reference": "kernel-0:2.4.9-e.72.athlon",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-0:2.4.9-e.72.src"
        },
        "product_reference": "kernel-0:2.4.9-e.72.src",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-BOOT-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-BOOT-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-debug-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-debug-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-doc-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-doc-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-enterprise-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-enterprise-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-headers-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-headers-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.72.athlon as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-smp-0:2.4.9-e.72.athlon"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.72.athlon",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-smp-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-source-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-source-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-summit-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:kernel-summit-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-summit-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-0:2.4.9-e.72.athlon"
        },
        "product_reference": "kernel-0:2.4.9-e.72.athlon",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.src as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-0:2.4.9-e.72.src"
        },
        "product_reference": "kernel-0:2.4.9-e.72.src",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-BOOT-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-BOOT-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-debug-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-debug-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-doc-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-doc-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-enterprise-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-enterprise-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-headers-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-headers-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.72.athlon as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-smp-0:2.4.9-e.72.athlon"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.72.athlon",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-smp-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-source-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-source-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-summit-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:kernel-summit-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-summit-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-0:2.4.9-e.72.athlon"
        },
        "product_reference": "kernel-0:2.4.9-e.72.athlon",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:2.4.9-e.72.src as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-0:2.4.9-e.72.src"
        },
        "product_reference": "kernel-0:2.4.9-e.72.src",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-BOOT-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-BOOT-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-debug-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-debug-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-doc-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-doc-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-enterprise-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-enterprise-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-headers-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-headers-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.72.athlon as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-smp-0:2.4.9-e.72.athlon"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.72.athlon",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-smp-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-smp-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-smp-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-0:2.4.9-e.72.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-source-0:2.4.9-e.72.i386"
        },
        "product_reference": "kernel-source-0:2.4.9-e.72.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-summit-0:2.4.9-e.72.i686 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
        },
        "product_reference": "kernel-summit-0:2.4.9-e.72.i686",
        "relates_to_product_reference": "2.1WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-6054",
      "discovery_date": "2006-11-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618234"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-0:2.4.9-e.72.i686",
          "2.1AS:kernel-0:2.4.9-e.72.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1AS:kernel-source-0:2.4.9-e.72.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
          "2.1ES:kernel-source-0:2.4.9-e.72.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1WS:kernel-source-0:2.4.9-e.72.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-6054"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618234",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618234"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-6054",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-6054"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6054",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6054"
        }
      ],
      "release_date": "2006-11-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-0:2.4.9-e.72.i686",
            "2.1AS:kernel-0:2.4.9-e.72.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1AS:kernel-source-0:2.4.9-e.72.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
            "2.1ES:kernel-source-0:2.4.9-e.72.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1WS:kernel-source-0:2.4.9-e.72.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0672"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-6058",
      "discovery_date": "2006-11-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "217007"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function.  NOTE: this issue might be due to an integer overflow or signedness error.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "minix_bmap denial of service",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-0:2.4.9-e.72.i686",
          "2.1AS:kernel-0:2.4.9-e.72.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1AS:kernel-source-0:2.4.9-e.72.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
          "2.1ES:kernel-source-0:2.4.9-e.72.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1WS:kernel-source-0:2.4.9-e.72.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-6058"
        },
        {
          "category": "external",
          "summary": "RHBZ#217007",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=217007"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-6058",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-6058"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-6058",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6058"
        }
      ],
      "release_date": "2006-11-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-0:2.4.9-e.72.i686",
            "2.1AS:kernel-0:2.4.9-e.72.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1AS:kernel-source-0:2.4.9-e.72.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
            "2.1ES:kernel-source-0:2.4.9-e.72.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1WS:kernel-source-0:2.4.9-e.72.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0672"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "minix_bmap denial of service"
    },
    {
      "cve": "CVE-2007-1217",
      "discovery_date": "2007-03-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "402741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: CAPI overflow",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-0:2.4.9-e.72.i686",
          "2.1AS:kernel-0:2.4.9-e.72.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1AS:kernel-source-0:2.4.9-e.72.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
          "2.1ES:kernel-source-0:2.4.9-e.72.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1WS:kernel-source-0:2.4.9-e.72.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1217"
        },
        {
          "category": "external",
          "summary": "RHBZ#402741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=402741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1217"
        }
      ],
      "release_date": "2007-03-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-0:2.4.9-e.72.i686",
            "2.1AS:kernel-0:2.4.9-e.72.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1AS:kernel-source-0:2.4.9-e.72.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
            "2.1ES:kernel-source-0:2.4.9-e.72.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1WS:kernel-source-0:2.4.9-e.72.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0672"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: CAPI overflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ilja van Sprundel"
          ]
        }
      ],
      "cve": "CVE-2007-1353",
      "discovery_date": "2007-03-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "243259"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Bluetooth setsockopt() information leaks",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-0:2.4.9-e.72.i686",
          "2.1AS:kernel-0:2.4.9-e.72.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1AS:kernel-source-0:2.4.9-e.72.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
          "2.1ES:kernel-source-0:2.4.9-e.72.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1WS:kernel-source-0:2.4.9-e.72.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1353"
        },
        {
          "category": "external",
          "summary": "RHBZ#243259",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=243259"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1353",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1353"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1353",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1353"
        }
      ],
      "release_date": "2007-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-0:2.4.9-e.72.i686",
            "2.1AS:kernel-0:2.4.9-e.72.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1AS:kernel-source-0:2.4.9-e.72.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
            "2.1ES:kernel-source-0:2.4.9-e.72.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1WS:kernel-source-0:2.4.9-e.72.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0672"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "Bluetooth setsockopt() information leaks"
    },
    {
      "cve": "CVE-2007-1592",
      "discovery_date": "2007-03-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "243258"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "IPv6 oops triggerable by any user",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:kernel-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-0:2.4.9-e.72.i686",
          "2.1AS:kernel-0:2.4.9-e.72.src",
          "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1AS:kernel-source-0:2.4.9-e.72.i386",
          "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-0:2.4.9-e.72.i686",
          "2.1ES:kernel-0:2.4.9-e.72.src",
          "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
          "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
          "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
          "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
          "2.1ES:kernel-source-0:2.4.9-e.72.i386",
          "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-0:2.4.9-e.72.i686",
          "2.1WS:kernel-0:2.4.9-e.72.src",
          "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
          "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
          "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
          "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
          "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
          "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
          "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
          "2.1WS:kernel-source-0:2.4.9-e.72.i386",
          "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1592"
        },
        {
          "category": "external",
          "summary": "RHBZ#243258",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=243258"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1592",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1592"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1592",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1592"
        }
      ],
      "release_date": "2007-03-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:kernel-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-0:2.4.9-e.72.i686",
            "2.1AS:kernel-0:2.4.9-e.72.src",
            "2.1AS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1AS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1AS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1AS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1AS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1AS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1AS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1AS:kernel-source-0:2.4.9-e.72.i386",
            "2.1AS:kernel-summit-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-0:2.4.9-e.72.i686",
            "2.1ES:kernel-0:2.4.9-e.72.src",
            "2.1ES:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1ES:kernel-debug-0:2.4.9-e.72.i686",
            "2.1ES:kernel-doc-0:2.4.9-e.72.i386",
            "2.1ES:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1ES:kernel-headers-0:2.4.9-e.72.i386",
            "2.1ES:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1ES:kernel-smp-0:2.4.9-e.72.i686",
            "2.1ES:kernel-source-0:2.4.9-e.72.i386",
            "2.1ES:kernel-summit-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-0:2.4.9-e.72.i686",
            "2.1WS:kernel-0:2.4.9-e.72.src",
            "2.1WS:kernel-BOOT-0:2.4.9-e.72.i386",
            "2.1WS:kernel-debug-0:2.4.9-e.72.i686",
            "2.1WS:kernel-doc-0:2.4.9-e.72.i386",
            "2.1WS:kernel-enterprise-0:2.4.9-e.72.i686",
            "2.1WS:kernel-headers-0:2.4.9-e.72.i386",
            "2.1WS:kernel-smp-0:2.4.9-e.72.athlon",
            "2.1WS:kernel-smp-0:2.4.9-e.72.i686",
            "2.1WS:kernel-source-0:2.4.9-e.72.i386",
            "2.1WS:kernel-summit-0:2.4.9-e.72.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0672"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "IPv6 oops triggerable by any user"
    }
  ]
}

cve-2006-6054

Vulnerability from cvelistv5

Published

2006-11-22 01:00

Modified

2024-08-07 20:12

Severity

Summary

The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum.

References

URL	Tags
http://rhn.redhat.com/errata/RHSA-2007-0436.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/24098	third-party-advisory, x_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2006_79_kernel.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-0673.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2007-0014.html	vendor-advisory, x_refsource_REDHAT
http://www.vupen.com/english/advisories/2006/4487	vdb-entry, x_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006	vdb-entry, signature, x_refsource_OVAL
http://secunia.com/advisories/27528	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm	x_refsource_CONFIRM
http://www.ubuntu.com/usn/usn-416-1	vendor-advisory, x_refsource_UBUNTU
http://www.debian.org/security/2008/dsa-1504	vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/24206	third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0672.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/23474	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/22837	third-party-advisory, x_refsource_SECUNIA
http://projects.info-pull.com/mokb/MOKB-12-11-2006.html	x_refsource_MISC
http://secunia.com/advisories/23997	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/471457	mailing-list, x_refsource_BUGTRAQ
http://www.debian.org/security/2008/dsa-1503	vendor-advisory, x_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30201	vdb-entry, x_refsource_XF
http://secunia.com/advisories/29058	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25630	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25691	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:12:31.367Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
          },
          {
            "name": "24098",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24098"
          },
          {
            "name": "SUSE-SA:2006:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "RHSA-2007:0014",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
          },
          {
            "name": "ADV-2006-4487",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4487"
          },
          {
            "name": "oval:org.mitre.oval:def:10006",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
          },
          {
            "name": "USN-416-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-416-1"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "24206",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24206"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "23474",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23474"
          },
          {
            "name": "22837",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22837"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html"
          },
          {
            "name": "23997",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23997"
          },
          {
            "name": "20070615 rPSA-2007-0124-1 kernel xen",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471457"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "kernel-ext2-filesystem-dos(30201)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30201"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "25630",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25630"
          },
          {
            "name": "25691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25691"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-11-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
        },
        {
          "name": "24098",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24098"
        },
        {
          "name": "SUSE-SA:2006:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "RHSA-2007:0014",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
        },
        {
          "name": "ADV-2006-4487",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4487"
        },
        {
          "name": "oval:org.mitre.oval:def:10006",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
        },
        {
          "name": "USN-416-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-416-1"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "24206",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24206"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "23474",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23474"
        },
        {
          "name": "22837",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22837"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html"
        },
        {
          "name": "23997",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23997"
        },
        {
          "name": "20070615 rPSA-2007-0124-1 kernel xen",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471457"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "kernel-ext2-filesystem-dos(30201)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30201"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "25630",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25630"
        },
        {
          "name": "25691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25691"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6054",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0436",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
            },
            {
              "name": "24098",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24098"
            },
            {
              "name": "SUSE-SA:2006:079",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_79_kernel.html"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "RHSA-2007:0014",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0014.html"
            },
            {
              "name": "ADV-2006-4487",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4487"
            },
            {
              "name": "oval:org.mitre.oval:def:10006",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm"
            },
            {
              "name": "USN-416-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-416-1"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "24206",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24206"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "23474",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23474"
            },
            {
              "name": "22837",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22837"
            },
            {
              "name": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html",
              "refsource": "MISC",
              "url": "http://projects.info-pull.com/mokb/MOKB-12-11-2006.html"
            },
            {
              "name": "23997",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23997"
            },
            {
              "name": "20070615 rPSA-2007-0124-1 kernel xen",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/471457"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "kernel-ext2-filesystem-dos(30201)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30201"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "25630",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25630"
            },
            {
              "name": "25691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25691"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-6054",
    "datePublished": "2006-11-22T01:00:00",
    "dateReserved": "2006-11-21T00:00:00",
    "dateUpdated": "2024-08-07T20:12:31.367Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-1353

Vulnerability from cvelistv5

Published

2007-04-24 16:00

Modified

2024-08-07 12:50

Severity

Summary

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.

References

URL	Tags
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626	vdb-entry, signature, x_refsource_OVAL
http://www.vupen.com/english/advisories/2007/1495	vdb-entry, x_refsource_VUPEN
http://www.ubuntu.com/usn/usn-470-1	vendor-advisory, x_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2007-0673.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/26289	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/27528	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25838	third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1504	vendor-advisory, x_refsource_DEBIAN
http://www.debian.org/security/2007/dsa-1356	vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/25683	third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0672.html	vendor-advisory, x_refsource_REDHAT
http://www.ubuntu.com/usn/usn-489-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/26478	third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/24976	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2007-0671.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/29058	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25596	third-party-advisory, x_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3	x_refsource_CONFIRM
https://rhn.redhat.com/errata/RHSA-2007-0376.html	vendor-advisory, x_refsource_REDHAT
http://www.ubuntu.com/usn/usn-486-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/26450	third-party-advisory, x_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2007_35_kernel.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/25700	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26139	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/23594	vdb-entry, x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2007-0488.html	vendor-advisory, x_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm	x_refsource_CONFIRM
http://secunia.com/advisories/26133	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:50:35.205Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:10626",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626"
          },
          {
            "name": "ADV-2007-1495",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1495"
          },
          {
            "name": "USN-470-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-470-1"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "26289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26289"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "name": "25838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25838"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "DSA-1356",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1356"
          },
          {
            "name": "25683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25683"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "USN-489-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-489-1"
          },
          {
            "name": "26478",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26478"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "24976",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24976"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
          },
          {
            "name": "RHSA-2007:0671",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "25596",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25596"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3"
          },
          {
            "name": "RHSA-2007:0376",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
          },
          {
            "name": "USN-486-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-486-1"
          },
          {
            "name": "26450",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26450"
          },
          {
            "name": "SUSE-SA:2007:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
          },
          {
            "name": "25700",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25700"
          },
          {
            "name": "26139",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26139"
          },
          {
            "name": "23594",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23594"
          },
          {
            "name": "RHSA-2007:0488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          },
          {
            "name": "26133",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26133"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-04-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:10626",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626"
        },
        {
          "name": "ADV-2007-1495",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1495"
        },
        {
          "name": "USN-470-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-470-1"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "26289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26289"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "name": "25838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25838"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "DSA-1356",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1356"
        },
        {
          "name": "25683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25683"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "USN-489-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-489-1"
        },
        {
          "name": "26478",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26478"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "24976",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24976"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
        },
        {
          "name": "RHSA-2007:0671",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "25596",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25596"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3"
        },
        {
          "name": "RHSA-2007:0376",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
        },
        {
          "name": "USN-486-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-486-1"
        },
        {
          "name": "26450",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26450"
        },
        {
          "name": "SUSE-SA:2007:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
        },
        {
          "name": "25700",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25700"
        },
        {
          "name": "26139",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26139"
        },
        {
          "name": "23594",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23594"
        },
        {
          "name": "RHSA-2007:0488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        },
        {
          "name": "26133",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26133"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-1353",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:10626",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626"
            },
            {
              "name": "ADV-2007-1495",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1495"
            },
            {
              "name": "USN-470-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-470-1"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "26289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26289"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "25838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25838"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "DSA-1356",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1356"
            },
            {
              "name": "25683",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25683"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "USN-489-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-489-1"
            },
            {
              "name": "26478",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26478"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "24976",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24976"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm"
            },
            {
              "name": "RHSA-2007:0671",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "25596",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25596"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3"
            },
            {
              "name": "RHSA-2007:0376",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2007-0376.html"
            },
            {
              "name": "USN-486-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-486-1"
            },
            {
              "name": "26450",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26450"
            },
            {
              "name": "SUSE-SA:2007:035",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
            },
            {
              "name": "25700",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25700"
            },
            {
              "name": "26139",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26139"
            },
            {
              "name": "23594",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23594"
            },
            {
              "name": "RHSA-2007:0488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0488.html"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            },
            {
              "name": "26133",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26133"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-1353",
    "datePublished": "2007-04-24T16:00:00",
    "dateReserved": "2007-03-08T00:00:00",
    "dateUpdated": "2024-08-07T12:50:35.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-6058

Vulnerability from cvelistv5

Published

2006-11-22 01:00

Modified

2024-08-07 20:12

Severity

Summary

The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error.

References

URL	Tags
http://projects.info-pull.com/mokb/MOKB-17-11-2006.html	x_refsource_MISC
https://issues.rpath.com/browse/RPL-1929	x_refsource_CONFIRM
http://www.debian.org/security/2007/dsa-1436	vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/27703	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/28141	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/28706	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/27528	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:226	vendor-advisory, x_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112	vendor-advisory, x_refsource_MANDRIVA
http://www.debian.org/security/2008/dsa-1504	vendor-advisory, x_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2008:008	vendor-advisory, x_refsource_MANDRIVA
http://www.novell.com/linux/security/advisories/2007_59_kernel.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/28654	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/23034	third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0672.html	vendor-advisory, x_refsource_REDHAT
http://www.vupen.com/english/advisories/2006/4613	vdb-entry, x_refsource_VUPEN
http://www.ubuntu.com/usn/usn-558-1	vendor-advisory, x_refsource_UBUNTU
http://www.ubuntu.com/usn/usn-574-1	vendor-advisory, x_refsource_UBUNTU
http://secunia.com/advisories/29058	third-party-advisory, x_refsource_SECUNIA
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24	x_refsource_CONFIRM
http://secunia.com/advisories/28971	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/28170	third-party-advisory, x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:232	vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/27614	third-party-advisory, x_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-578-1	vendor-advisory, x_refsource_UBUNTU
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T20:12:31.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://projects.info-pull.com/mokb/MOKB-17-11-2006.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1929"
          },
          {
            "name": "DSA-1436",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1436"
          },
          {
            "name": "27703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27703"
          },
          {
            "name": "28141",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28141"
          },
          {
            "name": "28706",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28706"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "name": "MDKSA-2007:226",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:226"
          },
          {
            "name": "MDVSA-2008:112",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
          },
          {
            "name": "DSA-1504",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1504"
          },
          {
            "name": "MDVSA-2008:008",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
          },
          {
            "name": "SUSE-SA:2007:059",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_59_kernel.html"
          },
          {
            "name": "28654",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28654"
          },
          {
            "name": "23034",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23034"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "ADV-2006-4613",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4613"
          },
          {
            "name": "USN-558-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-558-1"
          },
          {
            "name": "USN-574-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-574-1"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24"
          },
          {
            "name": "28971",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28971"
          },
          {
            "name": "28170",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28170"
          },
          {
            "name": "MDKSA-2007:232",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:232"
          },
          {
            "name": "27614",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27614"
          },
          {
            "name": "USN-578-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-578-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-11-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function.  NOTE: this issue might be due to an integer overflow or signedness error."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-11-30T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://projects.info-pull.com/mokb/MOKB-17-11-2006.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1929"
        },
        {
          "name": "DSA-1436",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1436"
        },
        {
          "name": "27703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27703"
        },
        {
          "name": "28141",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28141"
        },
        {
          "name": "28706",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28706"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "name": "MDKSA-2007:226",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:226"
        },
        {
          "name": "MDVSA-2008:112",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
        },
        {
          "name": "DSA-1504",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1504"
        },
        {
          "name": "MDVSA-2008:008",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
        },
        {
          "name": "SUSE-SA:2007:059",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_59_kernel.html"
        },
        {
          "name": "28654",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28654"
        },
        {
          "name": "23034",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23034"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "ADV-2006-4613",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4613"
        },
        {
          "name": "USN-558-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-558-1"
        },
        {
          "name": "USN-574-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-574-1"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24"
        },
        {
          "name": "28971",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28971"
        },
        {
          "name": "28170",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28170"
        },
        {
          "name": "MDKSA-2007:232",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:232"
        },
        {
          "name": "27614",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27614"
        },
        {
          "name": "USN-578-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-578-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function.  NOTE: this issue might be due to an integer overflow or signedness error."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://projects.info-pull.com/mokb/MOKB-17-11-2006.html",
              "refsource": "MISC",
              "url": "http://projects.info-pull.com/mokb/MOKB-17-11-2006.html"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1929",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1929"
            },
            {
              "name": "DSA-1436",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1436"
            },
            {
              "name": "27703",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27703"
            },
            {
              "name": "28141",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28141"
            },
            {
              "name": "28706",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28706"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "MDKSA-2007:226",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:226"
            },
            {
              "name": "MDVSA-2008:112",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:112"
            },
            {
              "name": "DSA-1504",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1504"
            },
            {
              "name": "MDVSA-2008:008",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:008"
            },
            {
              "name": "SUSE-SA:2007:059",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_59_kernel.html"
            },
            {
              "name": "28654",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28654"
            },
            {
              "name": "23034",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/23034"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "ADV-2006-4613",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4613"
            },
            {
              "name": "USN-558-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-558-1"
            },
            {
              "name": "USN-574-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-574-1"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24"
            },
            {
              "name": "28971",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28971"
            },
            {
              "name": "28170",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28170"
            },
            {
              "name": "MDKSA-2007:232",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:232"
            },
            {
              "name": "27614",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27614"
            },
            {
              "name": "USN-578-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-578-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-6058",
    "datePublished": "2006-11-22T01:00:00",
    "dateReserved": "2006-11-21T00:00:00",
    "dateUpdated": "2024-08-07T20:12:31.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-1217

Vulnerability from cvelistv5

Published

2007-03-02 19:00

Modified

2024-08-07 12:50

Severity

Summary

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.

References

URL	Tags
http://osvdb.org/34742	vdb-entry, x_refsource_OSVDB
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503	vdb-entry, signature, x_refsource_OVAL
http://bugzilla.kernel.org/show_bug.cgi?id=8028	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2007:078	vendor-advisory, x_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2007-0673.html	vendor-advisory, x_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200704-23.xml	vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/24777	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/27528	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26760	third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0705.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/23333	vdb-entry, x_refsource_BID
http://www.redhat.com/support/errata/RHSA-2007-0672.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/26709	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26478	third-party-advisory, x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2007-0774.html	vendor-advisory, x_refsource_REDHAT
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2007-0671.html	vendor-advisory, x_refsource_REDHAT
http://www.securitytracker.com/id?1018539	vdb-entry, x_refsource_SECTRACK
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:50:35.018Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "34742",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34742"
          },
          {
            "name": "oval:org.mitre.oval:def:10503",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.kernel.org/show_bug.cgi?id=8028"
          },
          {
            "name": "MDKSA-2007:078",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "GLSA-200704-23",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200704-23.xml"
          },
          {
            "name": "24777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24777"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "name": "26760",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26760"
          },
          {
            "name": "RHSA-2007:0705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0705.html"
          },
          {
            "name": "23333",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23333"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "26709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26709"
          },
          {
            "name": "26478",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26478"
          },
          {
            "name": "RHSA-2007:0774",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0774.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530"
          },
          {
            "name": "RHSA-2007:0671",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
          },
          {
            "name": "1018539",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018539"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "34742",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34742"
        },
        {
          "name": "oval:org.mitre.oval:def:10503",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.kernel.org/show_bug.cgi?id=8028"
        },
        {
          "name": "MDKSA-2007:078",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "GLSA-200704-23",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200704-23.xml"
        },
        {
          "name": "24777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24777"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "name": "26760",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26760"
        },
        {
          "name": "RHSA-2007:0705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0705.html"
        },
        {
          "name": "23333",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23333"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "26709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26709"
        },
        {
          "name": "26478",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26478"
        },
        {
          "name": "RHSA-2007:0774",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0774.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530"
        },
        {
          "name": "RHSA-2007:0671",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
        },
        {
          "name": "1018539",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018539"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1217",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "34742",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34742"
            },
            {
              "name": "oval:org.mitre.oval:def:10503",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503"
            },
            {
              "name": "http://bugzilla.kernel.org/show_bug.cgi?id=8028",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.kernel.org/show_bug.cgi?id=8028"
            },
            {
              "name": "MDKSA-2007:078",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "GLSA-200704-23",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200704-23.xml"
            },
            {
              "name": "24777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24777"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "26760",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26760"
            },
            {
              "name": "RHSA-2007:0705",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0705.html"
            },
            {
              "name": "23333",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23333"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "26709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26709"
            },
            {
              "name": "26478",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26478"
            },
            {
              "name": "RHSA-2007:0774",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0774.html"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530"
            },
            {
              "name": "RHSA-2007:0671",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0671.html"
            },
            {
              "name": "1018539",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018539"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1217",
    "datePublished": "2007-03-02T19:00:00",
    "dateReserved": "2007-03-02T00:00:00",
    "dateUpdated": "2024-08-07T12:50:35.018Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-1592

Vulnerability from cvelistv5

Published

2007-03-22 19:00

Modified

2024-08-07 12:59

Severity

Summary

net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.

References

URL	Tags
http://rhn.redhat.com/errata/RHSA-2007-0436.html	vendor-advisory, x_refsource_REDHAT
http://www.debian.org/security/2007/dsa-1286	vendor-advisory, x_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2007-0347.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=linux-netdev&m=117406721731891&w=2	mailing-list, x_refsource_MLIST
http://www.ubuntu.com/usn/usn-464-1	vendor-advisory, x_refsource_UBUNTU
http://www.novell.com/linux/security/advisories/2007_43_kernel.html	vendor-advisory, x_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:078	vendor-advisory, x_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2007-0673.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/24777	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/23104	vdb-entry, x_refsource_BID
http://secunia.com/advisories/27528	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/26379	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25226	third-party-advisory, x_refsource_SECUNIA
http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/24618	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25683	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/1084	vdb-entry, x_refsource_VUPEN
http://www.mandriva.com/security/advisories?name=MDVSA-2011:051	vendor-advisory, x_refsource_MANDRIVA
http://secunia.com/advisories/25288	third-party-advisory, x_refsource_SECUNIA
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478	x_refsource_MISC
http://www.redhat.com/support/errata/RHSA-2007-0672.html	vendor-advisory, x_refsource_REDHAT
http://rhn.redhat.com/errata/RHBA-2007-0304.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/25099	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25961	third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2008/dsa-1503	vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/25078	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25392	third-party-advisory, x_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4	x_refsource_CONFIRM
http://www.novell.com/linux/security/advisories/2007_30_kernel.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/29058	third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1304	vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/25630	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/25714	third-party-advisory, x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/33176	vdb-entry, x_refsource_XF
http://www.novell.com/linux/security/advisories/2007_35_kernel.html	vendor-advisory, x_refsource_SUSE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130	vdb-entry, signature, x_refsource_OVAL
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm	x_refsource_CONFIRM

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:59:08.976Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2007:0436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
          },
          {
            "name": "DSA-1286",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1286"
          },
          {
            "name": "RHSA-2007:0347",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
          },
          {
            "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-netdev\u0026m=117406721731891\u0026w=2"
          },
          {
            "name": "USN-464-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-464-1"
          },
          {
            "name": "SUSE-SA:2007:043",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html"
          },
          {
            "name": "MDKSA-2007:078",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
          },
          {
            "name": "RHSA-2007:0673",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
          },
          {
            "name": "24777",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24777"
          },
          {
            "name": "23104",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23104"
          },
          {
            "name": "27528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27528"
          },
          {
            "name": "26379",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26379"
          },
          {
            "name": "25226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25226"
          },
          {
            "name": "SUSE-SA:2007:029",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html"
          },
          {
            "name": "24618",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24618"
          },
          {
            "name": "25683",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25683"
          },
          {
            "name": "ADV-2007-1084",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1084"
          },
          {
            "name": "MDVSA-2011:051",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051"
          },
          {
            "name": "25288",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25288"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478"
          },
          {
            "name": "RHSA-2007:0672",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
          },
          {
            "name": "RHBA-2007-0304",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
          },
          {
            "name": "25099",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25099"
          },
          {
            "name": "25961",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25961"
          },
          {
            "name": "DSA-1503",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2008/dsa-1503"
          },
          {
            "name": "25078",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25078"
          },
          {
            "name": "25392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25392"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4"
          },
          {
            "name": "SUSE-SA:2007:030",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
          },
          {
            "name": "29058",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29058"
          },
          {
            "name": "DSA-1304",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1304"
          },
          {
            "name": "25630",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25630"
          },
          {
            "name": "25714",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25714"
          },
          {
            "name": "kernel-tcpv6synrecvsoc-dos(33176)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176"
          },
          {
            "name": "SUSE-SA:2007:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10130",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2007:0436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
        },
        {
          "name": "DSA-1286",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1286"
        },
        {
          "name": "RHSA-2007:0347",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
        },
        {
          "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-netdev\u0026m=117406721731891\u0026w=2"
        },
        {
          "name": "USN-464-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-464-1"
        },
        {
          "name": "SUSE-SA:2007:043",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html"
        },
        {
          "name": "MDKSA-2007:078",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
        },
        {
          "name": "RHSA-2007:0673",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
        },
        {
          "name": "24777",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24777"
        },
        {
          "name": "23104",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23104"
        },
        {
          "name": "27528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27528"
        },
        {
          "name": "26379",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26379"
        },
        {
          "name": "25226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25226"
        },
        {
          "name": "SUSE-SA:2007:029",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html"
        },
        {
          "name": "24618",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24618"
        },
        {
          "name": "25683",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25683"
        },
        {
          "name": "ADV-2007-1084",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1084"
        },
        {
          "name": "MDVSA-2011:051",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051"
        },
        {
          "name": "25288",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25288"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478"
        },
        {
          "name": "RHSA-2007:0672",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
        },
        {
          "name": "RHBA-2007-0304",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
        },
        {
          "name": "25099",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25099"
        },
        {
          "name": "25961",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25961"
        },
        {
          "name": "DSA-1503",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2008/dsa-1503"
        },
        {
          "name": "25078",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25078"
        },
        {
          "name": "25392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25392"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4"
        },
        {
          "name": "SUSE-SA:2007:030",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
        },
        {
          "name": "29058",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29058"
        },
        {
          "name": "DSA-1304",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1304"
        },
        {
          "name": "25630",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25630"
        },
        {
          "name": "25714",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25714"
        },
        {
          "name": "kernel-tcpv6synrecvsoc-dos(33176)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176"
        },
        {
          "name": "SUSE-SA:2007:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10130",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1592",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2007:0436",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html"
            },
            {
              "name": "DSA-1286",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1286"
            },
            {
              "name": "RHSA-2007:0347",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html"
            },
            {
              "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-netdev\u0026m=117406721731891\u0026w=2"
            },
            {
              "name": "USN-464-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-464-1"
            },
            {
              "name": "SUSE-SA:2007:043",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html"
            },
            {
              "name": "MDKSA-2007:078",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078"
            },
            {
              "name": "RHSA-2007:0673",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html"
            },
            {
              "name": "24777",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24777"
            },
            {
              "name": "23104",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23104"
            },
            {
              "name": "27528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27528"
            },
            {
              "name": "26379",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26379"
            },
            {
              "name": "25226",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25226"
            },
            {
              "name": "SUSE-SA:2007:029",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html"
            },
            {
              "name": "24618",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24618"
            },
            {
              "name": "25683",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25683"
            },
            {
              "name": "ADV-2007-1084",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1084"
            },
            {
              "name": "MDVSA-2011:051",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051"
            },
            {
              "name": "25288",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25288"
            },
            {
              "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478",
              "refsource": "MISC",
              "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478"
            },
            {
              "name": "RHSA-2007:0672",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html"
            },
            {
              "name": "RHBA-2007-0304",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html"
            },
            {
              "name": "25099",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25099"
            },
            {
              "name": "25961",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25961"
            },
            {
              "name": "DSA-1503",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2008/dsa-1503"
            },
            {
              "name": "25078",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25078"
            },
            {
              "name": "25392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25392"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4"
            },
            {
              "name": "SUSE-SA:2007:030",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html"
            },
            {
              "name": "29058",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29058"
            },
            {
              "name": "DSA-1304",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1304"
            },
            {
              "name": "25630",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25630"
            },
            {
              "name": "25714",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25714"
            },
            {
              "name": "kernel-tcpv6synrecvsoc-dos(33176)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176"
            },
            {
              "name": "SUSE-SA:2007:035",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10130",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299",
              "refsource": "CONFIRM",
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1592",
    "datePublished": "2007-03-22T19:00:00",
    "dateReserved": "2007-03-22T00:00:00",
    "dateUpdated": "2024-08-07T12:59:08.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

rhsa-2007_0672

Vulnerability from csaf_redhat

cve-2006-6054

Vulnerability from cvelistv5

cve-2007-1353

Vulnerability from cvelistv5

cve-2006-6058

Vulnerability from cvelistv5

cve-2007-1217

Vulnerability from cvelistv5

cve-2007-1592

Vulnerability from cvelistv5

Tags