PT-2006-5148 · Red Hat · Red Hat

Published 2006-10-17 · Updated 2024-02-15 · CVE-2006-4342

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux version 3

Description The issue allows local users to cause a denial of service, resulting in a deadlock. This occurs when the shmat function is run on a shared memory segment at the same time that the shmctl function is removing that segment, which prevents a spinlock from being unlocked.

Recommendations For Red Hat Enterprise Linux version 3, consider restricting access to the shmat and shmctl functions to minimize the risk of exploitation. As a temporary workaround, avoid running the shmat function on an shm at the same time that shmctl is removing that shm.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2006-4342

RHSA-2006:0710

Affected Products

Red Hat

References · 8

• 🔥 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618 · Exploit
• http://redhat.com/support/errata/RHSA-2006-0710.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4342 · Security Note
• http://kb.cert.org/vuls/id/245984 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm · Note
• http://secunia.com/advisories/22497 · Note
• http://secunia.com/advisories/23064 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649 · Note