#VU95751 Improper input validation in Linux kernel - CVE-2006-5757
Vulnerability identifier: #VU95751
Vulnerability risk: Low
CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID:
CWE-ID:
CWE-20
Exploitation vector: Local
Exploit availability: Yes
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform service disruption.
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel: All versions
External links
https://projects.info-pull.com/mokb/MOKB-05-11-2006.html
https://rhn.redhat.com/errata/RHSA-2007-0014.html
https://secunia.com/advisories/22702
https://secunia.com/advisories/22746
https://secunia.com/advisories/23474
https://secunia.com/advisories/23593
https://secunia.com/advisories/23752
https://secunia.com/advisories/23997
https://secunia.com/advisories/24098
https://secunia.com/advisories/24206
https://secunia.com/advisories/25691
https://secunia.com/advisories/25714
https://support.avaya.com/elmodocs2/security/ASA-2007-063.htm
https://www.debian.org/security/2007/dsa-1304
https://www.mandriva.com/security/advisories?name=MDKSA-2007:002
https://www.mandriva.com/security/advisories?name=MDKSA-2007:012
https://www.novell.com/linux/security/advisories/2006_79_kernel.html
https://www.securityfocus.com/archive/1/471457
https://www.securityfocus.com/bid/20920
https://www.ubuntu.com/usn/usn-416-1
https://www.vupen.com/english/advisories/2006/4359
https://exchange.xforce.ibmcloud.com/vulnerabilities/30029
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10111
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
