PT-2006-6945 · Linux · Linux Kernel

Published 2006-12-06 · Updated 2018-10-30 · CVE-2006-6333

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.19

Description The issue allows remote attackers to cause a denial of service, specifically memory corruption, by sending crafted packets. This is due to the incorrect assignment of a flag to the ip summed field by the tr rx function in ibmtr.c.

Recommendations For Linux kernel version 2.6.19, update to a newer version that contains a fix for this issue to prevent memory corruption via crafted packets.

Fix

Related Identifiers

CVE-2006-6333

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-6333 · Security Note
• http://vupen.com/english/advisories/2006/4907 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee28b0da1069ced1688aa9d0b7b378353b988321 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0d97e10ccac580e16d3dffbe4a9a88144360e64a%3Bhp=bfe59865b1dd50e5c4dbd4cefe506a31e1495a1a%3Bhb=ee28b0da1069ced1688aa9d0b7b378353b988321%3Bf=drivers/net/tokenring/ibmtr.c · Note
• http://securityfocus.com/bid/21490 · Note
• http://secunia.com/advisories/23254 · Note