CVE-2006-2661: canonical ubuntu_linux NULL Pointer Dereference

EPSS trend

Probability

16.47%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 16.47% on 20-09-2026

20-09-202620-10-2026

EPSS score

16.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
FreeType - '.TTF' File Remote Denial of Service
Maturity: poc

References

24 links

bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676X Refsource MISCIssue TrackingPatchThird Party Advisory
lists.suse.com/archive/suse-security-announce/2006-Jun/0012.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/20791Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692VDB EntrySignatureX Refsource OVALThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.securityfocus.com/bid/18329VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/20525Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21701Third Party AdvisoryX Refsource SECUNIA
usn.ubuntu.com/291-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/21385Third Party AdvisoryX Refsource SECUNIA

Show all 24 references

www.securityfocus.com/archive/1/436836/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/21135Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0500.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/23939Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-176.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/20591Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/20638Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016520VDB EntryX Refsource SECTRACKThird Party Advisory
www.vupen.com/english/advisories/2007/0381VDB EntryX Refsource VUPENThird Party Advisory
issues.rpath.com/browse/RPL-429X Refsource CONFIRMBroken Link
secunia.com/advisories/21062Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:099Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.debian.org/security/2006/dsa-1095Vendor AdvisoryX Refsource DEBIANThird Party Advisory
security-tracker.debian.org/tracker/CVE-2006-2661Advisory

Related vulnerabilities

CVE-2018-19200debianuriparser+32.48%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-6942alpinefreetype+72.08%8y ago13-02-2018 05:00An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.CVE-2018-12931canonicalubuntu_linux+1710.43%8y ago28-06-2018 14:00ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.CVE-2018-12699canonicalubuntu_linux+74.53%8y ago23-06-2018 22:00finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.CVE-2018-12930canonicalubuntu_linux+1710.44%8y ago28-06-2018 14:00ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.CVE-2018-12698canonicalubuntu_linux+46.43%8y ago23-06-2018 22:00demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

All vulnerabilities inubuntu_linux debian_linux freetype

CVE-2006-2661: canonical ubuntu_linux NULL Pointer Dereference

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References