CVE-2006-0039

2006-05-1900:00:00

ubuntu.com

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:P/I:N/A:C

0.001 Low

EPSS

Percentile

27.8%

JSON

Race condition in the do_add_counters function in netfilter for Linux
kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read
kernel memory by triggering the race condition in a way that produces a
size value that is inconsistent with allocated memory, which leads to a
buffer over-read in IPT_ENTRY_ITERATE.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-29.58UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.40UNKNOWN