PT-2006-1007 · Debian+2 · Debian+2

Published

2006-12-31

·

Updated

2023-02-13

·

CVE-2006-5755

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux kernel-patch-openvz (affected versions not specified) Linux kernel versions prior to 2.6.18
Description: The issue affects the Linux kernel and may lead to disruption of confidentiality, integrity, and availability of protected information. A local attacker can exploit this to cause a denial of service (crash) by manipulating the SYSENTER to set an NT flag, which can trigger a crash on the IRET of the next task.
Recommendations: For Debian GNU/Linux kernel-patch-openvz, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Linux kernel versions prior to 2.6.18, update to version 2.6.18 or later to resolve the issue.

Related Identifiers

BDU:2015-02148
CVE-2006-5755
DSA-1381-2
RHSA-2008:0957
RHSA-2008_0957

Affected Products

Debian
Linux Kernel
Red Hat