PT-2006-6389 · Linux · Linux Kernel

Published 2006-11-03 · Updated 2017-07-20 · CVE-2006-5701

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.x

Description: A double free vulnerability exists in the squashfs module of the Linux kernel, which can be exploited by local users to cause a denial of service. This is achieved by mounting a crafted squashfs filesystem.

Recommendations: For Linux kernel version 2.6.x, consider restricting access to the squashfs module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-5701

Affected Products

Linux Kernel

References · 11

• 🔥 https://exploit-db.com/exploits/28895 · Exploit
• 🔥 http://securityfocus.com/bid/20870 · Exploit
• 🔥 http://projects.info-pull.com/mokb/MOKB-02-11-2006.html · Exploit
• 🔥 http://secunia.com/advisories/22655 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-5701 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:047 · Vendor Advisory
• http://ubuntu.com/usn/usn-395-1 · Vendor Advisory
• http://secunia.com/advisories/23384 · Note
• http://secunia.com/advisories/24259 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29967 · Note
• http://secunia.com/advisories/23361 · Note