CVE-2006-4814

kernel Race condition in mincore can cause "ps -ef" to hang

Severity Score

4.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.

La función mincore en el núcleo de Linux anterior a 2.4.33.6 no bloquea adecuadamente el acceso al espacio del usuario, lo cual tiene impacto y vectores de ataque no especificados, posiblemente relativos a un bloqueo mortal.

*Credits: N/A

CVSS Scores

NISTv2 4.6

Attack Vector

Local

Attack Complexity

Low

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-09-15 CVE Reserved
2006-12-20 CVE Published
2014-05-12 First Exploit
2024-05-14 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-399: Resource Management Errors

CAPEC

References (34)

URL	Tag	Source
http://lists.vmware.com/pipermail/security-announce/2008/000023.html	Mailing List
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm	X_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6	X_refsource_confirm
http://www.securityfocus.com/archive/1/471457	Mailing List
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648	Signature

URL	Date	SRC
https://github.com/tagatac/linux-CVE-2006-4814	2014-05-12

URL	Date	SRC
http://www.debian.org/security/2007/dsa-1304	2017-10-11
http://www.debian.org/security/2008/dsa-1503	2017-10-11
http://www.securityfocus.com/bid/21663	2017-10-11

URL	Date	SRC
http://rhn.redhat.com/errata/RHSA-2007-0014.html	2017-10-11
http://secunia.com/advisories/23436	2017-10-11
http://secunia.com/advisories/23609	2017-10-11
http://secunia.com/advisories/23997	2017-10-11
http://secunia.com/advisories/24098	2017-10-11
http://secunia.com/advisories/24100	2017-10-11
http://secunia.com/advisories/24206	2017-10-11
http://secunia.com/advisories/24482	2017-10-11
http://secunia.com/advisories/25691	2017-10-11
http://secunia.com/advisories/25714	2017-10-11
http://secunia.com/advisories/29058	2017-10-11
http://secunia.com/advisories/30110	2017-10-11
http://secunia.com/advisories/31246	2017-10-11
http://secunia.com/advisories/33280	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2007:040	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2007:060	2017-10-11
http://www.novell.com/linux/security/advisories/2007_18_kernel.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2008-0211.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2008-0787.html	2017-10-11
http://www.trustix.org/errata/2007/0002	2017-10-11
http://www.ubuntu.com/usn/usn-416-1	2017-10-11
http://www.vupen.com/english/advisories/2006/5082	2017-10-11
http://www.vupen.com/english/advisories/2008/2222/references	2017-10-11
https://access.redhat.com/security/cve/CVE-2006-4814	2009-01-08
https://bugzilla.redhat.com/show_bug.cgi?id=306971	2009-01-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				<= 2.4.33.5 Search vendor "Linux" for product "Linux Kernel" and version " <= 2.4.33.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test10		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test11		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test12		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test8		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		test9		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.1 Search vendor "Linux" for product "Linux Kernel" and version "2.4.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.2 Search vendor "Linux" for product "Linux Kernel" and version "2.4.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.3 Search vendor "Linux" for product "Linux Kernel" and version "2.4.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.4 Search vendor "Linux" for product "Linux Kernel" and version "2.4.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.5 Search vendor "Linux" for product "Linux Kernel" and version "2.4.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.6 Search vendor "Linux" for product "Linux Kernel" and version "2.4.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.7 Search vendor "Linux" for product "Linux Kernel" and version "2.4.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.8 Search vendor "Linux" for product "Linux Kernel" and version "2.4.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.9 Search vendor "Linux" for product "Linux Kernel" and version "2.4.9"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.10 Search vendor "Linux" for product "Linux Kernel" and version "2.4.10"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.11 Search vendor "Linux" for product "Linux Kernel" and version "2.4.11"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.12 Search vendor "Linux" for product "Linux Kernel" and version "2.4.12"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.13 Search vendor "Linux" for product "Linux Kernel" and version "2.4.13"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.14 Search vendor "Linux" for product "Linux Kernel" and version "2.4.14"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.15 Search vendor "Linux" for product "Linux Kernel" and version "2.4.15"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.16 Search vendor "Linux" for product "Linux Kernel" and version "2.4.16"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.17 Search vendor "Linux" for product "Linux Kernel" and version "2.4.17"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		x86		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		pre8		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		pre2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		pre3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		pre4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		pre5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		pre6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.20 Search vendor "Linux" for product "Linux Kernel" and version "2.4.20"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.21 Search vendor "Linux" for product "Linux Kernel" and version "2.4.21"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.21 Search vendor "Linux" for product "Linux Kernel" and version "2.4.21"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.21 Search vendor "Linux" for product "Linux Kernel" and version "2.4.21"		pre4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.21 Search vendor "Linux" for product "Linux Kernel" and version "2.4.21"		pre7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.22 Search vendor "Linux" for product "Linux Kernel" and version "2.4.22"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.23 Search vendor "Linux" for product "Linux Kernel" and version "2.4.23"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.23 Search vendor "Linux" for product "Linux Kernel" and version "2.4.23"		pre9		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.23_ow2 Search vendor "Linux" for product "Linux Kernel" and version "2.4.23_ow2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.24 Search vendor "Linux" for product "Linux Kernel" and version "2.4.24"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.24_ow1 Search vendor "Linux" for product "Linux Kernel" and version "2.4.24_ow1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.25 Search vendor "Linux" for product "Linux Kernel" and version "2.4.25"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.26 Search vendor "Linux" for product "Linux Kernel" and version "2.4.26"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.27 Search vendor "Linux" for product "Linux Kernel" and version "2.4.27"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.27 Search vendor "Linux" for product "Linux Kernel" and version "2.4.27"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.27 Search vendor "Linux" for product "Linux Kernel" and version "2.4.27"		pre2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.27 Search vendor "Linux" for product "Linux Kernel" and version "2.4.27"		pre3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.27 Search vendor "Linux" for product "Linux Kernel" and version "2.4.27"		pre4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.27 Search vendor "Linux" for product "Linux Kernel" and version "2.4.27"		pre5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.28 Search vendor "Linux" for product "Linux Kernel" and version "2.4.28"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.29 Search vendor "Linux" for product "Linux Kernel" and version "2.4.29"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.29 Search vendor "Linux" for product "Linux Kernel" and version "2.4.29"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.29 Search vendor "Linux" for product "Linux Kernel" and version "2.4.29"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.30 Search vendor "Linux" for product "Linux Kernel" and version "2.4.30"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.30 Search vendor "Linux" for product "Linux Kernel" and version "2.4.30"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.30 Search vendor "Linux" for product "Linux Kernel" and version "2.4.30"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.31 Search vendor "Linux" for product "Linux Kernel" and version "2.4.31"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.31 Search vendor "Linux" for product "Linux Kernel" and version "2.4.31"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.32 Search vendor "Linux" for product "Linux Kernel" and version "2.4.32"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.32 Search vendor "Linux" for product "Linux Kernel" and version "2.4.32"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.32 Search vendor "Linux" for product "Linux Kernel" and version "2.4.32"		pre2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.33 Search vendor "Linux" for product "Linux Kernel" and version "2.4.33"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.33 Search vendor "Linux" for product "Linux Kernel" and version "2.4.33"		pre1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.33.2 Search vendor "Linux" for product "Linux Kernel" and version "2.4.33.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.33.3 Search vendor "Linux" for product "Linux Kernel" and version "2.4.33.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.33.4 Search vendor "Linux" for product "Linux Kernel" and version "2.4.33.4"		-		Affected