CVE-2006-1368

Published: Mar 23, 2006Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.15

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://secunia.com/advisories/19330

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19955

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20671

Source: cve@mitre.org

http://secunia.com/advisories/20914

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21045

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2006/dsa-1097

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1103

Source: cve@mitre.org

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8763716bfe4d8a16bef28c9947cf9d799b1796a5

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:123

Source: cve@mitre.org

http://www.securityfocus.com/bid/17831

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1046

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2554

Source: cve@mitre.org

https://usn.ubuntu.com/281-1/

Source: cve@mitre.org

http://secunia.com/advisories/19330

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19955

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/20671

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20914

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21045

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2006/dsa-1097

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1103

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8763716bfe4d8a16bef28c9947cf9d799b1796a5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:123

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17831

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1046

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2554

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/281-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.