// For flags

CVE-2006-5753

kernel listxattr syscall can corrupt user space programs

Severity Score

7.2
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges via unknown vectors.

Vulnerabilidad no especificada en la llamada al sistema listxattr del núcleo de Linux, cuando un "inode malo" (bad inode) está presente, permite a usuarios locales provocar una denegación de servicio (corrupción de datos) y posiblemente obtener privilegios mediante vectores no especificados.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-11-06 CVE Reserved
  • 2007-01-30 CVE Published
  • 2024-06-24 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (35)
URL Tag Source
http://lkml.org/lkml/2007/1/3/150 X_refsource_misc
http://osvdb.org/33020 Vdb Entry
http://secunia.com/advisories/23955 Third Party Advisory
http://secunia.com/advisories/23997 Third Party Advisory
http://secunia.com/advisories/24098 Third Party Advisory
http://secunia.com/advisories/24100 Third Party Advisory
http://secunia.com/advisories/24206 Third Party Advisory
http://secunia.com/advisories/24400 Third Party Advisory
http://secunia.com/advisories/24429 Third Party Advisory
http://secunia.com/advisories/24482 Third Party Advisory
http://secunia.com/advisories/24547 Third Party Advisory
http://secunia.com/advisories/25226 Third Party Advisory
http://secunia.com/advisories/25683 Third Party Advisory
http://secunia.com/advisories/25691 Third Party Advisory
http://secunia.com/advisories/25714 Third Party Advisory
http://secunia.com/advisories/29058 Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm X_refsource_confirm
http://www.securityfocus.com/archive/1/471457 Mailing List
http://www.securityfocus.com/bid/22316 Vdb Entry
https://issues.rpath.com/browse/RPL-1106 X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9371 Signature
URL Date SRC
URL Date SRC
URL Date SRC
http://fedoranews.org/cms/node/2739 2023-02-13
http://fedoranews.org/cms/node/2740 2023-02-13
http://www.debian.org/security/2007/dsa-1304 2023-02-13
http://www.debian.org/security/2008/dsa-1503 2023-02-13
http://www.mandriva.com/security/advisories?name=MDKSA-2007:040 2023-02-13
http://www.mandriva.com/security/advisories?name=MDKSA-2007:060 2023-02-13
http://www.novell.com/linux/security/advisories/2007_18_kernel.html 2023-02-13
http://www.novell.com/linux/security/advisories/2007_21_kernel.html 2023-02-13
http://www.novell.com/linux/security/advisories/2007_30_kernel.html 2023-02-13
http://www.novell.com/linux/security/advisories/2007_35_kernel.html 2023-02-13
http://www.redhat.com/support/errata/RHSA-2007-0014.html 2023-02-13
http://www.ubuntu.com/usn/usn-416-1 2023-02-13
https://access.redhat.com/security/cve/CVE-2006-5753 2007-01-30
https://bugzilla.redhat.com/show_bug.cgi?id=306891 2007-01-30
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.20.1
Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.1"
-
Affected
Redhat
Search vendor "Redhat"
 Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
 4.0
Search vendor "Redhat" for product "Enterprise Linux" and version "4.0"
advanced_server
Affected
Redhat
Search vendor "Redhat"
 Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
 4.0
Search vendor "Redhat" for product "Enterprise Linux" and version "4.0"
enterprise_server
Affected
Redhat
Search vendor "Redhat"
 Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
 4.0
Search vendor "Redhat" for product "Enterprise Linux" and version "4.0"
workstation
Affected
Redhat
Search vendor "Redhat"
 Enterprise Linux Desktop
Search vendor "Redhat" for product "Enterprise Linux Desktop"
 4.0
Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "4.0"
-
Affected