| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1522 | 4.9 |
The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, whi
|
13-02-2023 - 02:16 | 10-04-2006 - 20:02 | |
| CVE-2006-1052 | 2.1 |
The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process.
|
30-10-2018 - 16:26 | 05-05-2006 - 12:46 | |
| CVE-2006-0744 | 4.9 |
Linux kernel before 2.6.16.5 does not properly handle uncanonical return addresses on Intel EM64T CPUs, which reports an exception in the SYSRET instead of the next instruction, which causes the kernel exception handler to run on the user stack with
|
30-10-2018 - 16:26 | 18-04-2006 - 10:02 | |
| CVE-2006-2071 | 2.1 |
Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issu
|
18-10-2018 - 16:37 | 27-04-2006 - 17:06 | |
| CVE-2006-1242 | 5.0 |
The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which b
|
18-10-2018 - 16:31 | 15-03-2006 - 17:06 | |
| CVE-2006-1525 | 4.9 |
ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference.
|
03-10-2018 - 21:37 | 19-04-2006 - 18:18 | |
| CVE-2006-2271 | 7.8 |
The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state.
|
11-10-2017 - 01:30 | 09-05-2006 - 16:02 | |
| CVE-2006-2272 | 7.8 |
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks. This vulnerability is addressed in the following product release:
|
11-10-2017 - 01:30 | 09-05-2006 - 16:02 | |
| CVE-2006-1527 | 5.0 |
The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown vectors that cause an invalid SCTP chunk size to be processed by the for_each_sctp_chunk function. Upgrade to
|
11-10-2017 - 01:30 | 03-05-2006 - 22:02 |