// For flags

CVE-2006-5749

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash.

La función isdn_ppp_ccp_reset_alloc_state en el drivers/isdn/isdn_ppp.c del kernel del Linu 2.4 anterior al 2.4.34-rc4 no llama a la función init_timer para restaurar el estado del temporizador ISDN PPP CCP, lo cual genera vectores de ataque desconocidos y, como resultado, la caída del sistema.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
Single
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-11-06 CVE Reserved
  • 2006-12-31 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (23)
URL Tag Source
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34 X_refsource_confirm
http://secunia.com/advisories/23609 Third Party Advisory
http://secunia.com/advisories/23752 Third Party Advisory
http://secunia.com/advisories/24098 Third Party Advisory
http://secunia.com/advisories/24100 Third Party Advisory
http://secunia.com/advisories/24547 Third Party Advisory
http://secunia.com/advisories/25226 Third Party Advisory
http://secunia.com/advisories/25683 Third Party Advisory
http://secunia.com/advisories/25691 Third Party Advisory
http://www.kernel.org/git/?p=linux/kernel/git/wtarreau/linux-2.4.git%3Ba=commitdiff%3Bh=05dca9b77f99d80cf615075624666106d5b61727 X_refsource_confirm
http://www.securityfocus.com/archive/1/471457 Mailing List
http://www.securityfocus.com/bid/21835 Vdb Entry
http://www.securityfocus.com/bid/21883 Vdb Entry
URL Date SRC
URL Date SRC
http://secunia.com/advisories/23529 2023-02-13
URL Date SRC
http://www.mandriva.com/security/advisories?name=MDKSA-2007:012 2023-02-13
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 2023-02-13
http://www.mandriva.com/security/advisories?name=MDKSA-2007:040 2023-02-13
http://www.novell.com/linux/security/advisories/2007_18_kernel.html 2023-02-13
http://www.novell.com/linux/security/advisories/2007_21_kernel.html 2023-02-13
http://www.novell.com/linux/security/advisories/2007_30_kernel.html 2023-02-13
http://www.novell.com/linux/security/advisories/2007_35_kernel.html 2023-02-13
http://www.trustix.org/errata/2007/0002 2023-02-13
http://www.ubuntu.com/usn/usn-416-1 2023-02-13
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 <= 2.4.34
Search vendor "Linux" for product "Linux Kernel" and version " <= 2.4.34"
rc3
Affected