CVE-2006-6106: linux linux_kernel

Modified

Published 19-12-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-6106 is a high (CVSS 7.5) vulnerability in linux linux_kernel. EPSS estimates a 5.79% chance of exploitation in the next 30 days, higher than 93.1% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

5.79%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5

DSA-1304 DSA-1304-1 DSA-1503-1 DSA-1503-2 RHSA-2007:0014

Timeline

19-12-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

5.79%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.79% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Linux1 product

linux_kernel2.4.22 | 2.4.23 | 2.4.24 | 2.4.25 | 2.4.26 | 2.4.27 | 2.4.28 | 2.4.29 | 2.4.30 | 2.4.31 | 2.4.32 | 2.4.33 | 2.4.33.1 | 2.4.33.2 | 2.4.33.3 | 2.4.33.4 | 2.6.2 | 2.6.2:rc1 | 2.6.2:rc2 | 2.6.2:rc3 | 2.6.3 | 2.6.3:rc1 | 2.6.3:rc2 | 2.6.3:rc3 | 2.6.3:rc4 | 2.6.4 | 2.6.4:rc1 | 2.6.4:rc2 | 2.6.4:rc3 | 2.6.5 | 2.6.5:rc1 | 2.6.5:rc2 | 2.6.5:rc3 | 2.6.6 | 2.6.6:rc1 | 2.6.6:rc2 | 2.6.6:rc3 | 2.6.7 | 2.6.7:rc1 | 2.6.7:rc2 | 2.6.7:rc3 | 2.6.8 | 2.6.8:rc1 | 2.6.8:rc2 | 2.6.8:rc3 | 2.6.8:rc4 | 2.6.8.1 | 2.6.9 | 2.6.9:rc1 | 2.6.9:rc2 | 2.6.9:rc3 | 2.6.9:rc4 | 2.6.10 | 2.6.10:rc1 | 2.6.10:rc2 | 2.6.10:rc3 | 2.6.11 | 2.6.11:rc1 | 2.6.11:rc2 | 2.6.11:rc3 | 2.6.11:rc4 | 2.6.11:rc5 | 2.6.11.1 | 2.6.11.2 | 2.6.11.3 | 2.6.11.4 | 2.6.11.5 | 2.6.11.6 | 2.6.11.7 | 2.6.11.8 | 2.6.11.9 | 2.6.11.10 | 2.6.11.11 | 2.6.11.12 | 2.6.12 | 2.6.12:rc1 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 2.6.12:rc6 | 2.6.12.1 | 2.6.12.2 | 2.6.12.3 | 2.6.12.4 | 2.6.12.5 | 2.6.12.6 | 2.6.13 | 2.6.13:rc1 | 2.6.13:rc2 | 2.6.13:rc3 | 2.6.13:rc4 | 2.6.13:rc5 | 2.6.13:rc6 | 2.6.13:rc7 | 2.6.13.1 | 2.6.13.2 | 2.6.13.3 | 2.6.13.4 | 2.6.13.5 | 2.6.14 | 2.6.14:rc1 | 2.6.14:rc2 | 2.6.14:rc3 | 2.6.14:rc4 | 2.6.14:rc5 | 2.6.14.1 | 2.6.14.2 | 2.6.14.3 | 2.6.14.4 | 2.6.14.5 | 2.6.14.6 | 2.6.14.7 | 2.6.15 | 2.6.15:rc1 | 2.6.15:rc2 | 2.6.15:rc3 | 2.6.15:rc4 | 2.6.15:rc5 | 2.6.15:rc6 | 2.6.15:rc7 | 2.6.15.1 | 2.6.15.2 | 2.6.15.3 | 2.6.15.4 | 2.6.15.5 | 2.6.15.6 | 2.6.15.7 | 2.6.16 | 2.6.16:rc1 | 2.6.16:rc2 | 2.6.16:rc3 | 2.6.16:rc4 | 2.6.16:rc5 | 2.6.16:rc6 | 2.6.16.1 | 2.6.16.2 | 2.6.16.3 | 2.6.16.4 | 2.6.16.5 | 2.6.16.6 | 2.6.16.7 | 2.6.16.8 | 2.6.16.9 | 2.6.16.10 | 2.6.16.11 | 2.6.16.12 | 2.6.16.13 | 2.6.16.14 | 2.6.16.15 | 2.6.16.16 | 2.6.16.17 | 2.6.16.18 | 2.6.16.19 | 2.6.16.20 | 2.6.16.21 | 2.6.16.22 | 2.6.16.23 | 2.6.16.24 | 2.6.16.25 | 2.6.16.26 | 2.6.16.27 | 2.6.16.28 | 2.6.16.29 | 2.6.16.30 | 2.6.16.31 | 2.6.16.32 | 2.6.16.33 | 2.6.16.34 | 2.6.16.35 | 2.6.16.36 | 2.6.16.37 | 2.6.16.38 | 2.6.16.39 | 2.6.16.40 | 2.6.16.41 | 2.6.16.42 | 2.6.16.43 | 2.6.16.44 | 2.6.16.45 | 2.6.16.46 | 2.6.16.47 | 2.6.16.48 | 2.6.16.49 | 2.6.16.50 | 2.6.16.51 | 2.6.16.52 | 2.6.16.53 | 2.6.16.54 | 2.6.16.55 | 2.6.16.56 | 2.6.16.57 | 2.6.16.58 | 2.6.16.59 | 2.6.16.60 | 2.6.16.61 | 2.6.16.62 | 2.6.17 | 2.6.17:rc1 | 2.6.17:rc2 | 2.6.17:rc3 | 2.6.17:rc4 | 2.6.17:rc5 | 2.6.17:rc6 | 2.6.17.1 | 2.6.17.2 | 2.6.17.3 | 2.6.17.4 | 2.6.17.5 | 2.6.17.6 | 2.6.17.7 | 2.6.17.8 | 2.6.17.9 | 2.6.17.10 | 2.6.17.11 | 2.6.17.12 | 2.6.17.13 | 2.6.17.14 | 2.6.18 | 2.6.18:rc1 | 2.6.18:rc2 | 2.6.18:rc3 | 2.6.18:rc4 | 2.6.18:rc5 | 2.6.18:rc6 | 2.6.18:rc7 | 2.6.18.1 | 2.6.18.2 | 2.6.18.3 | 2.6.18.4 | 2.6.18.5 | 2.6.19 | 2.6.19:rc1 | 2.6.19:rc2 | 2.6.19:rc3 | 2.6.19:rc4 | 2.6.19:rc5 | 2.6.19:rc6 | 2.6.19.1 | 2.6.19.2 | 2.6.19.3 | 2.6.19.4 | 2.6.19.5 | 2.6.19.6 | 2.6.19.7

1 vendor · 1 product

References

41 links

www.trustix.org/errata/2007/0002/Vendor AdvisoryX Refsource TRUSTIX
secunia.com/advisories/24098Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2006/5037VDB EntryX Refsource VUPENVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:025Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27227Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10891VDB EntrySignatureX Refsource OVAL
www.novell.com/linux/security/advisories/2007_53_kernel.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/23609Third Party AdvisoryX Refsource SECUNIAVendor Advisory
rhn.redhat.com/errata/RHSA-2007-0014.htmlVendor AdvisoryX Refsource REDHAT
www.mandriva.com/security/advisories?name=MDKSA-2007:012Vendor AdvisoryX Refsource MANDRIVA

Show all 41 references

secunia.com/advisories/23593Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_21_kernel.htmlVendor AdvisoryX Refsource SUSE
support.avaya.com/elmodocs2/security/ASA-2007-063.htmX Refsource CONFIRM
www.ubuntu.com/usn/usn-416-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/24105Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25226Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23408Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/23752Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25683Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/24206Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/459615/100/0/threadedMailing ListX Refsource BUGTRAQ
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218602X Refsource MISC
secunia.com/advisories/23997Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/471457Mailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2007_18_kernel.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2008/dsa-1503Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/24547Third Party AdvisoryX Refsource SECUNIAVendor Advisory
marc.info?l=linux-kernel&m=116648929829440&w=2Mailing ListX Refsource MLIST
www.mandriva.com/security/advisories?name=MDKSA-2007:002Vendor AdvisoryX Refsource MANDRIVA
www.novell.com/linux/security/advisories/2007_30_kernel.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29058Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2007/dsa-1304Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/25714Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/30912VDB EntryX Refsource XF
www.securityfocus.com/bid/21604VDB EntryX Refsource BID
www.novell.com/linux/security/advisories/2007_35_kernel.htmlVendor AdvisoryX Refsource SUSE
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5X Refsource CONFIRMPatch
secunia.com/advisories/23427Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/25691Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-848X Refsource CONFIRM
marc.info?l=linux-kernel&m=116614741607528&w=2Mailing ListX Refsource MLIST