PT-2006-1620 · Linux · Linux Kernel

Mark J. Cox + 1 · Published 2006-03-12 · Updated 2018-10-03 · CVE-2006-0557

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.16 and earlier

Description The issue concerns the sys mbind function in mempolicy.c, which fails to perform a sanity check on the maxnod variable before proceeding with computations for the get nodes function. The impact and attack vectors of this issue are not explicitly stated.

Recommendations For Linux kernel version 2.6.16 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0557

DSA-1103

Affected Products

Linux Kernel

References · 19

• https://nvd.nist.gov/vuln/detail/CVE-2006-0557 · Security Note
• http://debian.org/security/2006/dsa-1103 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:059 · Vendor Advisory
• http://rhn.redhat.com/errata/RHBA-2007-0304.html · Vendor Advisory
• https://usn.ubuntu.com/281-1 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006-05-31.html · Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=184510 · Note
• http://securitytracker.com/id?1015752 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9674 · Note
• http://secunia.com/advisories/20398 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63 · Note
• http://osvdb.org/23895 · Note
• http://secunia.com/advisories/20914 · Note
• http://securityfocus.com/bid/16924 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25204 · Note