[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-4997Date: (C)2006-10-10   (M)2024-02-16


The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 7.1
Exploit Score: 3.9Exploit Score: 8.6
Impact Score: 3.6Impact Score: 6.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: MEDIUM
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: COMPLETE
Integrity: NONE 
Availability: HIGH 
  
Reference:
SECTRACK-1017526
http://www.securityfocus.com/archive/1/471457
BID-20363
SECUNIA-22253
SECUNIA-22279
SECUNIA-22292
SECUNIA-22497
SECUNIA-22762
SECUNIA-22945
SECUNIA-23064
SECUNIA-23370
SECUNIA-23384
SECUNIA-23395
SECUNIA-23474
SECUNIA-23752
SECUNIA-23788
SECUNIA-24288
SECUNIA-25691
ADV-2006-3937
ADV-2006-3999
DSA-1233
DSA-1237
MDKSA-2006:197
MDKSA-2007:012
MDKSA-2007:025
RHSA-2006:0689
RHSA-2006:0710
RHSA-2007:0012
RHSA-2007:0013
SUSE-SA:2006:079
USN-395-1
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265
http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm
http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe26109a9dfd9327fdbe630fc819e1b7450986b2
kernel-clipmkip-dos(29387)
oval:org.mitre.oval:def:10388

CWE    1
CWE-416

© SecPod Technologies