Published: 19/09/2006 Updated: 07/11/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.18
linux linux kernel 2.6.17.10
linux linux kernel 2.6.17.11

Sridhar Samudrala discovered a local Denial of Service vulnerability in the handling of SCTP sockets By opening such a socket with a special SO_LINGER value, a local attacker could exploit this to crash the kernel (CVE-2006-4535) ...

This advisory covers the S/390 components of the recent security update for the Linux 268 kernel that were missing due to technical problems For reference, please see the text of the original advisory Several security related problems have been discovered in the Linux kernel which may lead to a denial of service or even the execution of arbitr ...

CWE-399 http://www.ubuntu.com/usn/usn-347-1 http://www.securityfocus.com/bid/20087 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204460 http://secunia.com/advisories/21945 http://www.debian.org/security/2006/dsa-1183 http://www.debian.org/security/2006/dsa-1184 http://secunia.com/advisories/22082 http://secunia.com/advisories/22093 http://secunia.com/advisories/21967 http://www.redhat.com/support/errata/RHSA-2006-0689.html http://securitytracker.com/id?1016992 http://secunia.com/advisories/22292 http://secunia.com/advisories/22382 http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm http://secunia.com/advisories/22945 http://www.mandriva.com/security/advisories?name=MDKSA-2006:182 http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 https://exchange.xforce.ibmcloud.com/vulnerabilities/29011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10530 http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg02314.html https://usn.ubuntu.com/347-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-4535

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect