PT-2006-1620 · Linux · Linux Kernel

Mark J. Cox + 1 · Publicado 2006-03-12 · Atualizado 2018-10-03 · CVE-2006-0557

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.16 and earlier

Description The issue concerns the sys mbind function in mempolicy.c, which fails to perform a sanity check on the maxnod variable before proceeding with computations for the get nodes function. The impact and attack vectors of this issue are not explicitly stated.

Recommendations For Linux kernel version 2.6.16 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0557

DSA-1103

Produtos afetados

Linux Kernel

Referências · 19

• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=184510 · Nota
• http://securitytracker.com/id?1015752 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0557 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9674 · Nota
• http://secunia.com/advisories/20398 · Nota
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63 · Nota
• http://debian.org/security/2006/dsa-1103 · Aviso do Fabricante
• http://osvdb.org/23895 · Nota
• http://secunia.com/advisories/20914 · Nota
• http://securityfocus.com/bid/16924 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25204 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:059 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2554 · Nota
• http://rhn.redhat.com/errata/RHBA-2007-0304.html · Aviso do Fabricante
• https://usn.ubuntu.com/281-1 · Aviso do Fabricante