Lucene search

K
ubuntuUbuntuUSN-326-1
HistoryJul 28, 2006 - 12:00 a.m.

heartbeat vulnerability

2006-07-2800:00:00
ubuntu.com
33

6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

0.4%

Releases

  • Ubuntu 6.06
  • Ubuntu 5.10
  • Ubuntu 5.04

Details

Yan Rong Ge discovered that heartbeat did not set proper permissions
for an allocated shared memory segment. A local attacker could exploit
this to render the heartbeat service unavailable (Denial of
Service).

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchheartbeat< 1.2.4-2ubuntu0.1UNKNOWN
Ubuntu5.10noarchheartbeat< 1.2.3-12ubuntu0.1UNKNOWN
Ubuntu5.04noarchheartbeat< 1.2.3-3ubuntu1.2UNKNOWN

6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

0.4%