CVE-2006-5701

Related Files

Mandriva Linux Security Advisory 2007.047

Posted Feb 24, 2007

Authored by Mandriva | Site mandriva.com

Mandriva Security Advisory - Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel. A double free vulnerability in the squashfs module could allow a local user to cause a Denial of Service by mounting a crafted squashfs filesystem. The zlib_inflate function allows local users to cause a crash via a malformed filesystem that uses zlib compression that triggers memory corruption. The key serial number collision avoidance code in the key_alloc_serial function in kernels 2.6.9 up to 2.6.20 allows local users to cause a crash via vectors that will trigger a null dereference. The provided packages are patched to fix these vulnerabilities. All users are encouraged to upgrade to these updated kernels immediately and reboot to effect the fixes.

tags | advisory, denial of service, kernel, local, vulnerability

systems | linux, mandriva

advisories | CVE-2006-5701, CVE-2006-5823, CVE-2007-0006

SHA-256 | fa3164508ead23714d065780c1d3952998280e75fa1b5ed525adc60dabceb4f8

Download | Favorite | View