CVE-2006-4997

Published: Oct 10, 2006Modified: Apr 23, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) via unknown vectors that cause the ATM subsystem to access the memory of socket buffers after they are freed (freed pointer dereference).

Affected (7)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Redhat: Enterprise Linux

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.18

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 3
Redhat Enterprise Linux	Version 4

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (76)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265

Source: cve@mitre.org

ExploitIssue Tracking

http://secunia.com/advisories/22253

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/22279

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://secunia.com/advisories/22292

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

http://secunia.com/advisories/22497

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/22762

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/22945

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23064

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23370

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23384

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23395

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23474

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23752

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23788

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/24288

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/25691

Source: cve@mitre.org

Broken Link

http://securitytracker.com/id?1017526

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe26109a9dfd9327fdbe630fc819e1b7450986b2

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2006:197

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2007:012

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2007:025

Source: cve@mitre.org

Broken Link

http://www.novell.com/linux/security/advisories/2006_79_kernel.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2006-0689.html

Source: cve@mitre.org

Broken LinkPatch

http://www.redhat.com/support/errata/RHSA-2006-0710.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0012.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0013.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/471457

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/20363

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-395-1

Source: cve@mitre.org

Third Party Advisory

http://www.us.debian.org/security/2006/dsa-1233

Source: cve@mitre.org

Broken Link

http://www.us.debian.org/security/2006/dsa-1237

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2006/3937

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2006/3999

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/29387

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10388

Source: cve@mitre.org

Broken Link

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206265