MEDIUM
security flaw
Published Mar 22, 2006
6.9
MEDIUMCVSS 2.0
EPSS 0.41%
Description
Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
Affected products
No data.
OR
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.1
- 2.6.1
- 2.6.1
- 2.6.2
- 2.6.3
- 2.6.4
- 2.6.5
- 2.6.6
- 2.6.6
- 2.6.7
- 2.6.7
- 2.6.8
- 2.6.8
- 2.6.8
- 2.6.8
- 2.6.9
- 2.6.10
- 2.6.10
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11.5
- 2.6.11.6
- 2.6.11.7
- 2.6.11.8
- 2.6.11.11
- 2.6.11.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12.1
- 2.6.12.2
- 2.6.12.3
- 2.6.12.4
- 2.6.12.5
- 2.6.12.6
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13.1
- 2.6.13.2
- 2.6.13.3
- 2.6.13.4
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14.1
- 2.6.14.2
- 2.6.14.3
- 2.6.14.4
- 2.6.14.5
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15.1
- 2.6.15.2
- 2.6.15.3
- 2.6.15.4
- 2.6.15.5
- 2.6.16
- 2.6_test9_cvs
No data.
Red Hat Enterprise Linux 4
kernel-0:2.6.9-42.EL
Fixed · RHSA-2006:0575
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | kernel-0:2.6.9-42.EL | Fixed | RHSA-2006:0575 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (22)
- http://secunia.com/advisories/19330 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/20671 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/20716 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/20914 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/21465 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/22417 third-party-advisoryx_refsource_SECUNIA
- http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm x_refsource_CONFIRM
- http://www.debian.org/security/2006/dsa-1097 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2006/dsa-1103 vendor-advisoryx_refsource_DEBIAN
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee4bb818ae35f68d1f848eae0a7b150a38eb4168 x_refsource_CONFIRM
- http://www.redhat.com/support/errata/RHSA-2006-0575.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/17178 vdb-entryx_refsource_BIDPatch
- http://www.ubuntu.com/usn/usn-302-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2006/1046 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/2554 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2006-0038 Vendor Advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186295 x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=1617868 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25400 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2006-0038
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10945 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2006-0038
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 22, 2006
Updated Aug 7, 2024
Reserved Dec 20, 2005
Link CVE-2006-0038
CISA Vulnrichment
Updated n/a