PT-2006-2090

CVE-2006-1055

·

Published

2006-04-05

·

Updated

2018-10-03

Description by

CVSS 2.0
4.9
Medium
MetricsAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.12 through 2.6.17-rc1
Description The issue is related to the fill write buffer function in sysfs/file.c, which does not properly zero-terminate a buffer when a length of PAGE SIZE or more is requested. This could allow local users to cause a denial of service by triggering an out-of-bounds read, potentially leading to a system crash.
Recommendations For Linux kernel versions 2.6.12 through 2.6.17-rc1, consider updating to a version after 2.6.17-rc1 to resolve the issue. As a temporary workaround, restrict local user access to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾