CVE-2006-1857: linux linux_kernel

Modified

Published 22-05-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-1857 is a high (CVSS 9.0) vulnerability in linux linux_kernel. EPSS estimates a 6.93% chance of exploitation in the next 30 days, higher than 94.1% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 9, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

9.0/10

010

High · v2.0 (NVD)

EPSS score

6.93%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3

DSA-1097-1 DSA-1103 RHSA-2006:0575

Timeline

22-05-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.

CVSS metrics

1 score · 1 source · 1 version

v2.09.0

EPSS trend

Probability

6.93%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

No change 0.00 pp

From 6.93% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.6.0 | 2.6.0:test1 | 2.6.0:test10 | 2.6.0:test11 | 2.6.0:test2 | 2.6.0:test3 | 2.6.0:test4 | 2.6.0:test5 | 2.6.0:test6 | 2.6.0:test7 | 2.6.0:test8 | 2.6.0:test9 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6.2:rc1 | 2.6.2:rc2 | 2.6.2:rc3 | 2.6.3 | 2.6.3:rc1 | 2.6.3:rc2 | 2.6.3:rc3 | 2.6.4 | 2.6.4:rc1 | 2.6.4:rc2 | 2.6.4:rc3 | 2.6.5 | 2.6.5:rc1 | 2.6.5:rc2 | 2.6.5:rc3 | 2.6.6 | 2.6.6:rc1 | 2.6.6:rc2 | 2.6.6:rc3 | 2.6.7 | 2.6.7:rc1 | 2.6.7:rc2 | 2.6.7:rc3 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.8:rc4 | 2.6.9:2.6.20 | 2.6.9:rc1 | 2.6.9:rc2 | 2.6.9:rc3 | 2.6.9:rc4 | 2.6.10 | 2.6.10:rc1 | 2.6.10:rc2 | 2.6.10:rc3 | 2.6.11 | 2.6.11:rc1 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11:rc5 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.11 | 2.6.11.12 | 2.6.12:rc1 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc2 | 2.6.13:rc3 | 2.6.13:rc4 | 2.6.13:rc5 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14:rc5 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc3 | 2.6.15:rc4 | 2.6.15:rc5 | 2.6.15:rc6 | 2.6.15:rc7 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.16:rc1 | 2.6.16:rc2 | 2.6.16:rc3 | 2.6.16:rc4 | 2.6.16:rc5 | 2.6.16:rc6 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6_test9_cvs

1 vendor · 1 product

References

26 links

www.novell.com/linux/security/advisories/2006_42_kernel.htmlVendor AdvisoryX Refsource SUSE
www.vupen.com/english/advisories/2006/2554VDB EntryX Refsource VUPEN
secunia.com/advisories/20716Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/1893VDB EntryX Refsource VUPEN
secunia.com/advisories/21476Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_47_kernel.htmlVendor AdvisoryX Refsource SUSE
www.osvdb.org/25695VDB EntryX Refsource OSVDB
www.securityfocus.com/bid/18085VDB EntryX Refsource BID
www.mandriva.com/security/advisories?name=MDKSA-2006:150Vendor AdvisoryX Refsource MANDRIVA
www.ubuntu.com/usn/usn-302-1Vendor AdvisoryX Refsource UBUNTU

Show all 26 references

www.mandriva.com/security/advisories?name=MDKSA-2006:123Vendor AdvisoryX Refsource MANDRIVA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10622VDB EntrySignatureX Refsource OVAL
www.debian.org/security/2006/dsa-1097Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2006-0575.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/20185Third Party AdvisoryX Refsource SECUNIA
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17X Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/26584VDB EntryX Refsource XF
www.debian.org/security/2006/dsa-1103Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/21465Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21498Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21045Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-200.htmX Refsource CONFIRM
secunia.com/advisories/22417Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20671Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21179Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20914Third Party AdvisoryX Refsource SECUNIA