CVE-2006-2934: linux linux_kernel Resource Management Errors

Modified

Published 30-06-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-2934 is a medium (CVSS 5.0) Resource Management Errors vulnerability in linux linux_kernel. EPSS estimates a 5.20% chance of exploitation in the next 30 days, higher than 92.4% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

5.20%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2006:0575

Timeline

30-06-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3 and 2.6.16 before 2.6.16.23 allows remote attackers to cause a denial of service (crash) via a packet without any chunks, which causes a variable to contain an invalid value that is later used to dereference a pointer.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

5.20%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.20% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-399Resource Management ErrorsWeaknesses in this category are related to improper management of system resources.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.6.16 | 2.6.16.1 | 2.6.16.2 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.17 | 2.6.17.1 | 2.6.17.2

1 vendor · 1 product

References

28 links

www.ubuntu.com/usn/usn-331-1Vendor AdvisoryX Refsource UBUNTU
www.osvdb.org/26963VDB EntryX Refsource OSVDB
secunia.com/advisories/21934Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/20917Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2006_42_kernel.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/439483/100/100/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21298Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/439610/100/100/threadedMailing ListX Refsource BUGTRAQ
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197387X Refsource CONFIRMPatch
www.novell.com/linux/security/advisories/2006_47_kernel.htmlVendor AdvisoryX Refsource SUSE

Show all 28 references

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDKSA-2006:151Vendor AdvisoryX Refsource MANDRIVA
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.23X Refsource CONFIRM
secunia.com/advisories/21614Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0575.htmlVendor AdvisoryX Refsource REDHAT
www.kb.cert.org/vuls/id/717844Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/21465Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-346-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21498Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2006-200.htmX Refsource CONFIRM
secunia.com/advisories/22417Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/20986Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10932VDB EntrySignatureX Refsource OVAL
www.kernel.org/gitX Refsource CONFIRM
www.securityfocus.com/bid/18755VDB EntryX Refsource BID
www.vupen.com/english/advisories/2006/2623VDB EntryX Refsource VUPENVendor Advisory
issues.rpath.com/browse/RPL-488X Refsource CONFIRM
secunia.com/advisories/21179Third Party AdvisoryX Refsource SECUNIAVendor Advisory