PT-2006-6701 · Linux+1 · Linux Kernel+1

Publicado 2006-11-22 · Atualizado 2017-10-11 · CVE-2006-6056

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x up to 2.6.18

Description The issue allows local users to cause a denial of service, resulting in a crash, by utilizing a malformed file stream. This triggers a NULL pointer dereference in the superblock doinit function. The issue can be demonstrated using an HFS filesystem image when SELinux hooks are enabled.

Recommendations For Linux kernel versions 2.6.x up to 2.6.18, consider disabling SELinux hooks as a temporary workaround to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-6056

DSA-1304

RHSA-2007:0014

RHSA-2007_0014

Produtos afetados

Linux Kernel

Red Hat

Referências · 252

• 🔥 http://projects.info-pull.com/mokb/MOKB-14-11-2006.html · Exploit
• http://secunia.com/advisories/25691 · Nota
• https://bdu.fstec.ru/vul/2015-00976 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2006-6056 · Nota
• https://bdu.fstec.ru/vul/2015-06244 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00963 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00916 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00928 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00948 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03588 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00967 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2006-5619 · Nota
• https://bdu.fstec.ru/vul/2015-00983 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-03599 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06272 · Nota de Segurança