CVE-2006-2444: linux linux_kernel

Modified

Published 25-05-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-2444 is a high (CVSS 7.8) vulnerability in linux linux_kernel. EPSS estimates a 22.11% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (exploit-database, 05-06-2006)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v2.0 (NVD)

EPSS score

22.11%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 4

DSA-1183-1 DSA-1184-2 RHSA-2006:0437 RHSA-2006:0617

Timeline

25-05-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.

CVSS metrics

1 score · 1 source · 1 version

v2.07.8

EPSS trend

Probability

22.11%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

No change 0.00 pp

From 22.11% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedoslinuxVerified
Linux Kernel < 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.6.0 | 2.6.0:test1 | 2.6.0:test10 | 2.6.0:test11 | 2.6.0:test2 | 2.6.0:test3 | 2.6.0:test4 | 2.6.0:test5 | 2.6.0:test6 | 2.6.0:test7 | 2.6.0:test8 | 2.6.0:test9 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.1:rc3 | 2.6.2 | 2.6.2:rc1 | 2.6.2:rc2 | 2.6.2:rc3 | 2.6.3 | 2.6.3:rc1 | 2.6.3:rc2 | 2.6.3:rc3 | 2.6.3:rc4 | 2.6.4 | 2.6.4:rc1 | 2.6.4:rc2 | 2.6.4:rc3 | 2.6.5 | 2.6.5:rc1 | 2.6.5:rc2 | 2.6.5:rc3 | 2.6.6 | 2.6.6:rc1 | 2.6.6:rc2 | 2.6.6:rc3 | 2.6.7 | 2.6.7:rc1 | 2.6.7:rc2 | 2.6.7:rc3 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.8:rc4 | 2.6.8.1 | 2.6.8.1.5 | 2.6.9 | 2.6.9:2.6.20 | 2.6.9:rc1 | 2.6.9:rc2 | 2.6.9:rc3 | 2.6.9:rc4 | 2.6.10 | 2.6.10:rc1 | 2.6.10:rc2 | 2.6.10:rc3 | 2.6.11 | 2.6.11:rc1 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11:rc5 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.11_rc1_bk6 | 2.6.12 | 2.6.12:rc1 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc2 | 2.6.13:rc3 | 2.6.13:rc4 | 2.6.13:rc5 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14:rc5 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc3 | 2.6.15:rc4 | 2.6.15:rc5 | 2.6.15:rc6 | 2.6.15:rc7 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16:rc1 | 2.6.16:rc2 | 2.6.16:rc3 | 2.6.16:rc4 | 2.6.16:rc5 | 2.6.16:rc6 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16_rc7 | 2.6_test9_cvs

1 vendor · 1 product

References

34 links

www.redhat.com/support/errata/RHSA-2006-0437.htmlVendor AdvisoryX Refsource REDHAT
www.novell.com/linux/security/advisories/2006_42_kernel.htmlVendor AdvisoryX Refsource SUSE
securitytracker.com/id?1016153VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2006-0617.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/20716Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21605Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_47_kernel.htmlVendor AdvisoryX Refsource SUSE
www.osvdb.org/25750VDB EntryX Refsource OSVDB
secunia.com/advisories/21136Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1183Vendor AdvisoryX Refsource DEBIAN

Show all 34 references

secunia.com/advisories/20182Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-302-1Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2006/1916VDB EntryX Refsource VUPEN
secunia.com/advisories/22082Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21983Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_64_kernel.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/21035Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22174Third Party AdvisoryX Refsource SECUNIA
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18X Refsource CONFIRMPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11318VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2006-0580.htmlVendor AdvisoryX Refsource REDHAT
support.avaya.com/elmodocs2/security/ASA-2006-180.htmX Refsource CONFIRM
secunia.com/advisories/22822Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20225Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/18081VDB EntryX Refsource BID
exchange.xforce.ibmcloud.com/vulnerabilities/26594VDB EntryX Refsource XF
secunia.com/advisories/21498Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-203.htmX Refsource CONFIRM
www.kb.cert.org/vuls/id/681569Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.kernel.org/gitX Refsource CONFIRM
secunia.com/advisories/22093Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:087Vendor AdvisoryX Refsource MANDRIVA
www.debian.org/security/2006/dsa-1184Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/21179Third Party AdvisoryX Refsource SECUNIA