CVE-2006-4145
Vulnerability Summary
Timeline
Description
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
CVSS Metrics
- v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS Trends
Current EPSS score: 0.12%• Percentile: 31%
Techniques & Countermeasures
- CWE-399•Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
Affected Systems
- linux•linux_kernel
≤ 2.6.17 | 2.6.0 | 2.6.1 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.7 | 2.6.8 | 2.6.8.1 | 2.6.9 | 2.6.10 | 2.6.11 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.12 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.13.5 | 2.6.14 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.25 | 2.6.16.26 | 2.6.16.27 | 2.6.16.28 | 2.6.16.29 | 2.6.16.30 | 2.6.16.31
References (24)
- http://secunia.com/advisories/21934
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
- http://www.novell.com/linux/security/advisories/2006_79_kernel.html
- http://secunia.com/advisories/27227
- http://www.novell.com/linux/security/advisories/2007_53_kernel.html
- http://secunia.com/advisories/21695
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10796
- http://secunia.com/advisories/31685
- http://lkml.org/lkml/2006/6/16/6
- http://www.redhat.com/support/errata/RHSA-2008-0665.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:182
- http://secunia.com/advisories/22382
- http://secunia.com/advisories/23474
- http://www.vupen.com/english/advisories/2006/3308
- http://www.ubuntu.com/usn/usn-346-1
- https://issues.rpath.com/browse/RPL-611
- http://secunia.com/advisories/21515
- http://www.securityfocus.com/archive/1/444887/100/0/threaded
- http://www.securityfocus.com/bid/19562
- http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm
- http://secunia.com/advisories/22093
- http://secunia.com/advisories/21711
- http://www.debian.org/security/2006/dsa-1184
- http://secunia.com/advisories/31229