PT-2006-2090

CVE-2006-1055

·

تاريخ النشر

2006-04-05

·

تاريخ التحديث

2018-10-03

الوصف من

CVSS 2.0
4.9
متوسطة
المقاييسAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.12 through 2.6.17-rc1
Description The issue is related to the fill write buffer function in sysfs/file.c, which does not properly zero-terminate a buffer when a length of PAGE SIZE or more is requested. This could allow local users to cause a denial of service by triggering an out-of-bounds read, potentially leading to a system crash.
Recommendations For Linux kernel versions 2.6.12 through 2.6.17-rc1, consider updating to a version after 2.6.17-rc1 to resolve the issue. As a temporary workaround, restrict local user access to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾