PT-2006-1521 · Linux · Linux Kernel

Herbert Xu · Publicado 2006-02-07 · Atualizado 2018-10-19 · CVE-2006-0454

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.15.3

Description The issue arises when constructing an ICMP response in the icmp send function, which fails to properly handle the failure of the ip options echo function in icmp.c. This allows remote attackers to cause a denial of service (crash) through specific vectors, including the use of record-route and timestamp IP options with the needaddr bit set and a truncated value.

Recommendations For Linux kernel versions prior to 2.6.15.3, update to version 2.6.15.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-0454

Produtos afetados

Linux Kernel

Referências · 19

• http://secunia.com/advisories/18861 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2006_06_kernel.html · Aviso do Fabricante
• http://secunia.com/advisories/18784 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24575 · Nota
• http://marc.info/?l=linux-kernel&m=113927648820694&w=2 · Nota
• http://trustix.org/errata/2006/0006 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0464 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0454 · Nota de Segurança
• http://secunia.com/advisories/18774 · Aviso do Fabricante
• http://securityfocus.com/archive/1/427981/100/0/threaded · Aviso do Fabricante
• http://marc.info/?l=linux-kernel&m=113927617401569&w=2 · Nota
• http://secunia.com/advisories/18766 · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.3 · Nota
• http://redhat.com/archives/fedora-announce-list/2006-February/msg00037.html · Aviso do Fabricante
• http://ubuntu.com/usn/usn-250-1 · Aviso do Fabricante