CVE-2006-1242: linux linux_kernel

Modified

Published 15-03-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-1242 is a medium (CVSS 5.0) vulnerability in linux linux_kernel. EPSS estimates a 3.54% chance of exploitation in the next 30 days, higher than 89.3% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

3.54%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

DSA-1097-1 DSA-1103 RHSA-2006:0437 RHSA-2006:0575

Timeline

15-03-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

3.54%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.54% on 05-10-2026

05-10-202604-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.4.0 | 2.4.0:test1 | 2.4.0:test10 | 2.4.0:test11 | 2.4.0:test12 | 2.4.0:test2 | 2.4.0:test3 | 2.4.0:test4 | 2.4.0:test5 | 2.4.0:test6 | 2.4.0:test7 | 2.4.0:test8 | 2.4.0:test9 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.4.6 | 2.4.7 | 2.4.8 | 2.4.9 | 2.4.10 | 2.4.11 | 2.4.12 | 2.4.13 | 2.4.14 | 2.4.15 | 2.4.16 | 2.4.17 | 2.4.18 | 2.4.18:pre1 | 2.4.18:pre2 | 2.4.18:pre3 | 2.4.18:pre4 | 2.4.18:pre5 | 2.4.18:pre6 | 2.4.18:pre7 | 2.4.18:pre8 | 2.4.19 | 2.4.19:pre1 | 2.4.19:pre2 | 2.4.19:pre3 | 2.4.19:pre4 | 2.4.19:pre5 | 2.4.19:pre6 | 2.4.20 | 2.4.21 | 2.4.21:pre1 | 2.4.21:pre4 | 2.4.21:pre7 | 2.4.22 | 2.4.23 | 2.4.23:pre9 | 2.4.23_ow2 | 2.4.24 | 2.4.24_ow1 | 2.4.25 | 2.4.26 | 2.4.27 | 2.4.27:pre1 | 2.4.27:pre2 | 2.4.27:pre3 | 2.4.27:pre4 | 2.4.27:pre5 | 2.4.28 | 2.4.29 | 2.4.29:rc1 | 2.4.29:rc2 | 2.4.30 | 2.4.30:rc2 | 2.4.30:rc3 | 2.4.31 | 2.4.31:pre1 | 2.4.32 | 2.4.32:pre1 | 2.4.32:pre2 | 2.4.33:pre1 | 2.6.0 | 2.6.0:test1 | 2.6.0:test10 | 2.6.0:test11 | 2.6.0:test2 | 2.6.0:test3 | 2.6.0:test4 | 2.6.0:test5 | 2.6.0:test6 | 2.6.0:test7 | 2.6.0:test8 | 2.6.0:test9 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.6:rc1 | 2.6.7 | 2.6.7:rc1 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.9:2.6.20 | 2.6.10 | 2.6.10:rc2 | 2.6.11 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.11 | 2.6.11.12 | 2.6.12:rc1 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc4 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc3 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6_test9_cvs

1 vendor · 1 product

References

28 links

www.redhat.com/support/errata/RHSA-2006-0437.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2006/2554VDB EntryX Refsource VUPEN
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.1X Refsource CONFIRM
www.securityfocus.com/archive/1/427753/100/0/threadedMailing ListX Refsource BUGTRAQ
usn.ubuntu.com/281-1/Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21136Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/19402Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/archive/1/427893/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21983Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/17109VDB EntryX Refsource BID

Show all 28 references

www.debian.org/security/2006/dsa-1097Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2006-0575.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/archive/1/427622/100/0/threadedMailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2006-05-31.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/19955Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/428605/30/6210/threadedMailing ListX Refsource BUGTRAQ
support.avaya.com/elmodocs2/security/ASA-2006-180.htmX Refsource CONFIRM
www.debian.org/security/2006/dsa-1103Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/21465Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10317VDB EntrySignatureX Refsource OVAL
www.vupen.com/english/advisories/2006/1140VDB EntryX Refsource VUPEN
support.avaya.com/elmodocs2/security/ASA-2006-200.htmX Refsource CONFIRM
secunia.com/advisories/20398Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22417Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:086Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/20671Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20157Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20914Third Party AdvisoryX Refsource SECUNIA