PT-2004-3757 · Linux+1 · Linux+1

Lmh · Publicado 1970-01-01 · Atualizado 2018-10-30 · CVE-2006-5823

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux kernel-image-2.4.27-4-itanium version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-itanium-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc64 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-s390 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-s390-tape version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc64-smp version 2.4.27-4 Debian GNU/Linux kernel-build-2.4.27-4 version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-generic version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-mckinley version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc64 version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-smp version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-586tsc version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-generic version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-s390x version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-mckinley version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc64-smp version 2.4.27-4 Debian GNU/Linux kernel-pcmcia-modules-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux lm-sensors-2.4.27-4-686 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-k7 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-itanium version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-686-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc32 version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux pcmcia-modules-2.4.27-4-k7-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-sparc32-smp version 2.4.27-4 Debian GNU/Linux kernel-headers-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux i2c-2.4.27-4-386 version 2.4.27-4 Debian GNU/Linux hostap-modules-2.4.27-4-k6 version 2.4.27-4 Debian GNU/Linux kernel-image-2.4.27-4-sparc32-smp version 2.4.27-4

Description The issue is related to multiple vulnerabilities in various packages of the Debian GNU/Linux operating system. These vulnerabilities can be exploited remotely and may lead to a denial of service, causing disruption to the availability of protected information. The zlib inflate function in the Linux kernel 2.6.x is also affected, allowing local users to cause a denial of service via a malformed filesystem that uses zlib compression, triggering memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-189

CWE-399

Identificadores relacionados

BDU:2015-03581

BDU:2015-03582

BDU:2015-03583

BDU:2015-03584

BDU:2015-03585

BDU:2015-03586

BDU:2015-03587

BDU:2015-03588

BDU:2015-03589

BDU:2015-03590

BDU:2015-03591

BDU:2015-03592

BDU:2015-03593

BDU:2015-03594

BDU:2015-03595

BDU:2015-03596

BDU:2015-03597

BDU:2015-03598

BDU:2015-03599

BDU:2015-03600

BDU:2015-03601

BDU:2015-03602

BDU:2015-03603

BDU:2015-03604

BDU:2015-03605

BDU:2015-03606

BDU:2015-03607

BDU:2015-03608

BDU:2015-03609

BDU:2015-03610

BDU:2015-03611

BDU:2015-03612

BDU:2015-03613

BDU:2015-03614

BDU:2015-03615

BDU:2015-03616

BDU:2015-03617

BDU:2015-03618

BDU:2015-03619

BDU:2015-03620

BDU:2015-03621

BDU:2015-03622

BDU:2015-03623

BDU:2015-03624

BDU:2015-03625

BDU:2015-03626

BDU:2015-03627

BDU:2015-03628

BDU:2015-03629

BDU:2015-03630

BDU:2015-03631

BDU:2015-03632

BDU:2015-03633

BDU:2015-03634

BDU:2015-03635

BDU:2015-03636

BDU:2015-03637

BDU:2015-03638

BDU:2015-03639

BDU:2015-03640

BDU:2015-03641

BDU:2015-03642

BDU:2015-03643

BDU:2015-03644

BDU:2015-03645

BDU:2015-03646

BDU:2015-03647

BDU:2015-03648

BDU:2015-03649

BDU:2015-03650

BDU:2015-03651

BDU:2015-03652

BDU:2015-03653

BDU:2015-03654

CVE-2006-5823

DSA-1503-1

DSA-1503-2

DSA-1504-1

RHSA-2007:0014

RHSA-2007:0436

RHSA-2007_0014

Produtos afetados

Linux

Red Hat

Referências · 276

• https://bdu.fstec.ru/vul/2015-03591 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04902 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03590 · Nota de Segurança
• http://secunia.com/advisories/24206 · Nota
• https://bdu.fstec.ru/vul/2015-03617 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00941 · Nota de Segurança
• http://secunia.com/advisories/25630 · Nota
• https://access.redhat.com/security/cve/CVE-2006-4813 · Nota
• https://bdu.fstec.ru/vul/2015-00948 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6106 · Nota de Segurança
• http://novell.com/linux/security/advisories/2006_79_kernel.html · Aviso do Fabricante
• http://secunia.com/advisories/23474 · Nota
• https://bdu.fstec.ru/vul/2015-03609 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00954 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2172 · Nota de Segurança