CVE-2006-5170: debian debian_linux

EPSS trend

Probability

4.07%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.07% on 20-09-2026

20-09-202620-10-2026

EPSS score

4.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

30 links

securitytracker.com/id?1017153VDB EntryX Refsource SECTRACKThird Party Advisory
rhn.redhat.com/errata/RHSA-2006-0719.htmlVendor AdvisoryX Refsource REDHAT
issues.rpath.com/browse/RPL-680X Refsource CONFIRMBroken LinkThird Party Advisory
secunia.com/advisories/22682Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/447859/100/200/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.trustix.org/errata/2006/0061/Vendor AdvisoryX Refsource TRUSTIXBroken LinkThird Party Advisory
www.securityfocus.com/bid/20880VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/22685Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:201Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.novell.com/linux/security/advisories/2006_27_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link

Show all 30 references

secunia.com/advisories/22869Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22694Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23132Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200612-19.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/23428Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10418VDB EntrySignatureX Refsource OVALThird Party Advisory
www.debian.org/security/2006/dsa-1203Vendor AdvisoryX Refsource DEBIANIssue TrackingPatch
bugzilla.padl.com/show_bug.cgi?id=291X Refsource CONFIRMBroken LinkIssue TrackingVendor Advisory
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207286X Refsource CONFIRMIssue TrackingVendor Advisory
secunia.com/advisories/22696Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/4319VDB EntryX Refsource VUPENThird Party Advisory
access.redhat.com/errata/RHSA-2006:0719Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=207286REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0719.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-5170REPORT
bugzilla.redhat.com/show_bug.cgi?id=1618208REPORT
www.cve.org/CVERecord?id=CVE-2006-5170Advisory
nvd.nist.gov/vuln/detail/CVE-2006-5170Advisory
security-tracker.debian.org/tracker/CVE-2006-5170Advisory

Related vulnerabilities

CVE-2018-16850alpinepostgresql+395.15%7y ago13-11-2018 15:00postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.CVE-2018-16395alpineruby+2610.71%7y ago16-11-2018 18:00An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.CVE-2018-16396alpineruby+247.97%7y ago16-11-2018 18:00An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.CVE-2018-16866chainguardpy3-systemd+271.05%7y ago11-01-2019 19:00An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.CVE-2018-1283apache software foundationapache http server+119.74%8y ago26-03-2018 15:00In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.CVE-2018-1111fedoradhcp+1497.86%8y ago17-05-2018 16:00DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.

All vulnerabilities indebian_linux fedora_core enterprise_linux enterprise_linux_desktop enterprise_linux_for_ibm_z_systems

CVE-2006-5170: debian debian_linux

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References