CVE-2006-5619 — security flaw

Back Back to CVE browser

LOW

security flaw

Published Oct 31, 2006

2.1

LOW

CVSS 2.0

EPSS 0.43%

Description

The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18-stable allows local users to cause a denial of service (hang or oops) via unspecified manipulations that trigger an infinite loop while searching for flowlabels.

Affected products

Product	Package	State	Advisory
Red Hat Enterprise Linux 4	kernel-0:2.6.9-42.0.8.EL	Fixed	RHSA-2007:0014

Remediation

Red Hat statement

Red Hat is aware of this issue and are tracking it via bug 213214 for Red Hat Enterprise Linux 4: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=213214 This issue does not affect Red Hat Enterprise Linux 2.1 or 3

Metrics

0.43% 0.00427

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00427

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.43% (0.00427)	34.63th	v5 (v2026.06.15)
Jun 15, 2026	0.40% (0.00404)	31.92th	v5 (v2026.06.15)
Mar 17, 2025	0.08% (0.00080)	21.15th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00062)	28.39th	v3 (v2023.03.01)
Dec 27, 2023	0.06% (0.00064)	26.45th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.24th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)

Weaknesses (1)

CWE-399

References (29)

http://lkml.org/lkml/2006/11/5/46
mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2007-0014.html
vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/22665
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/22754
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23370
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23384
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23474
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23593
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23752
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23997
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24206
third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm
x_refsource_CONFIRM
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2007:002
vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:012
vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
vendor-advisoryx_refsource_MANDRIVA
http://www.novell.com/linux/security/advisories/2006_79_kernel.html
vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/451097/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20847
vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/usn-395-1
vendor-advisoryx_refsource_UBUNTU
http://www.us.debian.org/security/2006/dsa-1233
vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2006/4297
vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2006-5619
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1618220
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/29970
vdb-entryx_refsource_XF
https://issues.rpath.com/browse/RPL-760
x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2006-5619
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9311
vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2006-5619

Link	Providers	Tags
http://lkml.org/lkml/2006/11/5/46		mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2007-0014.html		vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/22665		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/22754		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23370		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23384		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23474		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23593		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23752		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/23997		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/24206		third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm		x_refsource_CONFIRM
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6		x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2007:002		vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:012		vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025		vendor-advisoryx_refsource_MANDRIVA
http://www.novell.com/linux/security/advisories/2006_79_kernel.html		vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/451097/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20847		vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/usn-395-1		vendor-advisoryx_refsource_UBUNTU
http://www.us.debian.org/security/2006/dsa-1233		vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2006/4297		vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2006-5619		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1618220		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/29970		vdb-entryx_refsource_XF
https://issues.rpath.com/browse/RPL-760		x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2006-5619
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9311		vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2006-5619

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 31, 2006

Updated Aug 7, 2024

Reserved Oct 31, 2006

Link CVE-2006-5619

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-5619

Red Hat

Severity Important

Public date Oct 31, 2006

Links CVE-2006-5619 - Bugzilla