PT-2006-6701 · Linux+1 · Linux Kernel+1

Published 2006-11-22 · Updated 2017-10-11 · CVE-2006-6056

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.x up to 2.6.18

Description The issue allows local users to cause a denial of service, resulting in a crash, by utilizing a malformed file stream. This triggers a NULL pointer dereference in the superblock doinit function. The issue can be demonstrated using an HFS filesystem image when SELinux hooks are enabled.

Recommendations For Linux kernel versions 2.6.x up to 2.6.18, consider disabling SELinux hooks as a temporary workaround to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-6056

DSA-1304

RHSA-2007:0014

RHSA-2007_0014

Affected Products

Linux Kernel

Red Hat

References · 252

• 🔥 http://projects.info-pull.com/mokb/MOKB-14-11-2006.html · Exploit
• https://bdu.fstec.ru/vul/2015-00976 · Security Note
• https://bdu.fstec.ru/vul/2015-06244 · Security Note
• https://bdu.fstec.ru/vul/2015-00963 · Security Note
• https://bdu.fstec.ru/vul/2015-00916 · Security Note
• https://bdu.fstec.ru/vul/2015-00928 · Security Note
• https://bdu.fstec.ru/vul/2015-00948 · Security Note
• https://bdu.fstec.ru/vul/2015-03588 · Security Note
• https://bdu.fstec.ru/vul/2015-00967 · Security Note
• https://bdu.fstec.ru/vul/2015-00983 · Security Note
• https://bdu.fstec.ru/vul/2015-03599 · Security Note
• https://bdu.fstec.ru/vul/2015-06272 · Security Note
• https://bdu.fstec.ru/vul/2015-03623 · Security Note
• https://bdu.fstec.ru/vul/2015-04221 · Security Note
• https://bdu.fstec.ru/vul/2015-04912 · Security Note