5
CVSSv2

CVE-2006-0454

Published: 07/02/2006 Updated: 19/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Linux kernel prior to 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote malicious users to cause a denial of service (crash) via vectors such as (1) record-route and (2) timestamp IP options with the needaddr bit set and a truncated value.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.12.2

linux linux kernel 2.6.12.5

linux linux kernel 2.6.12

linux linux kernel 2.6.13

linux linux kernel 2.6.14

linux linux kernel 2.6.14.3

linux linux kernel 2.6.14.4

linux linux kernel 2.6.12.4

linux linux kernel 2.6.12.6

linux linux kernel 2.6.14.1

linux linux kernel 2.6.14.2

linux linux kernel 2.6.12.3

linux linux kernel 2.6.13.1

linux linux kernel 2.6.13.3

linux linux kernel 2.6.13.4

linux linux kernel 2.6.14.5

linux linux kernel 2.6.14.6

linux linux kernel 2.6.15.2

linux linux kernel 2.6.12.1

linux linux kernel 2.6.13.2

linux linux kernel 2.6.13.5

linux linux kernel 2.6.14.7

linux linux kernel 2.6.15

linux linux kernel 2.6.15.1

Vendor Advisories

Herbert Xu discovered a remote Denial of Service vulnerability in the ICMP packet handler In some situations a memory allocation was released twice, which led to memory corruption A remote attacker could exploit this to crash the machine ...