security flaw
Published Nov 9, 2006
4.0
MEDIUMCVSS 2.0
EPSS 0.37%
Description
The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs.
Affected products
No data.
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.1
- 2.6.1
- 2.6.1
- 2.6.1
- 2.6.2
- 2.6.2
- 2.6.2
- 2.6.2
- 2.6.3
- 2.6.3
- 2.6.3
- 2.6.3
- 2.6.3
- 2.6.4
- 2.6.4
- 2.6.4
- 2.6.4
- 2.6.5
- 2.6.5
- 2.6.5
- 2.6.5
- 2.6.6
- 2.6.6
- 2.6.6
- 2.6.6
- 2.6.7
- 2.6.7
- 2.6.7
- 2.6.7
- 2.6.8
- 2.6.8
- 2.6.8
- 2.6.8
- 2.6.8
- 2.6.8.1
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.8.1.5
- 2.6.9
- 2.6.9
- 2.6.9
- 2.6.9
- 2.6.9
- 2.6.9
- 2.6.10
- 2.6.10
- 2.6.10
- 2.6.10
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11.1
- 2.6.11.2
- 2.6.11.3
- 2.6.11.4
- 2.6.11.5
- 2.6.11.6
- 2.6.11.7
- 2.6.11.8
- 2.6.11.9
- 2.6.11.10
- 2.6.11.11
- 2.6.11.12
- 2.6.11_rc1_bk6
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12.1
- 2.6.12.2
- 2.6.12.3
- 2.6.12.4
- 2.6.12.5
- 2.6.12.6
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13.1
- 2.6.13.2
- 2.6.13.3
- 2.6.13.4
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14.1
- 2.6.14.2
- 2.6.14.3
- 2.6.14.4
- 2.6.14.5
- 2.6.14.6
- 2.6.14.7
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15.1
- 2.6.15.2
- 2.6.15.3
- 2.6.15.4
- 2.6.15.5
- 2.6.15.6
- 2.6.15.7
- 2.6.16
- 2.6.16
- 2.6.16
- 2.6.16
- 2.6.16
- 2.6.16
- 2.6.16
- 2.6.16.1
- 2.6.16.2
- 2.6.16.3
- 2.6.16.4
- 2.6.16.5
- 2.6.16.6
- 2.6.16.7
- 2.6.16.8
- 2.6.16.9
- 2.6.16.10
- 2.6.16.11
- 2.6.16.12
- 2.6.16.13
- 2.6.16.14
- 2.6.16.15
- 2.6.16.16
- 2.6.16.17
- 2.6.16.18
- 2.6.16.19
- 2.6.16.20
- 2.6.16.21
- 2.6.16.22
- 2.6.16.23
- 2.6.16.24
- 2.6.16.27
- 2.6.16.30
- 2.6.16_rc7
- 2.6.17
- 2.6.17
- 2.6.17
- 2.6.17
- 2.6.17
- 2.6.17
- 2.6.17
- 2.6.17.1
- 2.6.17.2
- 2.6.17.3
- 2.6.17.4
- 2.6.17.5
- 2.6.17.6
- 2.6.17.7
- 2.6.17.8
- 2.6.17.9
- 2.6.17.10
- 2.6.17.11
- 2.6.17.12
- 2.6.17.13
- 2.6.17.14
- 2.6.18
- 2.6.18
- 2.6.18
- 2.6.18
- 2.6.18.1
- 2.6.19
- 2.6.19
- 2.6_test9_cvs
No data.
Red Hat Enterprise Linux 3
kernel-0:2.4.21-50.EL
Fixed · RHSA-2007:0436
Red Hat Enterprise Linux 4
kernel-0:2.6.9-42.0.8.EL
Fixed · RHSA-2007:0014
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 3 | kernel-0:2.4.21-50.EL | Fixed | RHSA-2007:0436 |
| Red Hat Enterprise Linux 4 | kernel-0:2.6.9-42.0.8.EL | Fixed | RHSA-2007:0014 |
No package ranges for this CVE.
Remediation
Red Hat statement
The CVE-2006-5823 is about a corrupted cramfs (MOKB-07-11-2006) that can cause a memory corruption and so crash the machine. For Red Hat Enterpise Linux 3 this issue is tracked via Bugzilla #216960 and for Red Hat Enterprise Linux 4 it is tracked via Bugzilla #216958. Red Hat Enterprise Linux 2.1 is not vulnerable to this issue. This issue has been rated as having low impact, because root privileges or physical access to the machine are needed to mount a corrupted filesystem and crash the machine. Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
No CWE recorded.
References (26)
- http://projects.info-pull.com/mokb/MOKB-07-11-2006.html x_refsource_MISC
- http://rhn.redhat.com/errata/RHSA-2007-0014.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2007-0436.html vendor-advisoryx_refsource_REDHAT
- http://secunia.com/advisories/22767 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/23474 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/23997 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24098 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24206 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24259 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24482 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25630 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25691 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/29058 third-party-advisoryx_refsource_SECUNIA
- http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm x_refsource_CONFIRM
- http://www.debian.org/security/2008/dsa-1503 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2008/dsa-1504 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:047 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:060 vendor-advisoryx_refsource_MANDRIVA
- http://www.novell.com/linux/security/advisories/2006_79_kernel.html vendor-advisoryx_refsource_SUSE
- http://www.securityfocus.com/archive/1/471457 mailing-listx_refsource_BUGTRAQ
- http://www.ubuntu.com/usn/usn-416-1 vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/security/cve/CVE-2006-5823 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1618227 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2006-5823
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10588 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2006-5823
Change history (0)
No recorded changes yet.