CVE-2006-6106

Published: Dec 19, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.

Affected (245)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.4.22
Linux Linux Kernel	Version 2.4.23
Linux Linux Kernel	Version 2.4.24
Linux Linux Kernel	Version 2.4.25
Linux Linux Kernel	Version 2.4.26
Linux Linux Kernel	Version 2.4.27
Linux Linux Kernel	Version 2.4.28
Linux Linux Kernel	Version 2.4.29
Linux Linux Kernel	Version 2.4.30
Linux Linux Kernel	Version 2.4.31
Linux Linux Kernel	Version 2.4.32
Linux Linux Kernel	Version 2.4.33.1
Linux Linux Kernel	Version 2.4.33.2
Linux Linux Kernel	Version 2.4.33.3
Linux Linux Kernel	Version 2.4.33.4
Linux Linux Kernel	Version 2.4.33

Configuration B

215 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.10 rc1
Linux Linux Kernel	Version 2.6.10 rc2
Linux Linux Kernel	Version 2.6.10 rc3
Linux Linux Kernel	Version 2.6.11.10
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.12
Linux Linux Kernel	Version 2.6.11.1
Linux Linux Kernel	Version 2.6.11.2
Linux Linux Kernel	Version 2.6.11.3
Linux Linux Kernel	Version 2.6.11.4
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11.9
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.11 rc1
Linux Linux Kernel	Version 2.6.11 rc2
Linux Linux Kernel	Version 2.6.11 rc3
Linux Linux Kernel	Version 2.6.11 rc4
Linux Linux Kernel	Version 2.6.11 rc5
Linux Linux Kernel	Version 2.6.12.1
Linux Linux Kernel	Version 2.6.12.2
Linux Linux Kernel	Version 2.6.12.3
Linux Linux Kernel	Version 2.6.12.4
Linux Linux Kernel	Version 2.6.12.5
Linux Linux Kernel	Version 2.6.12.6
Linux Linux Kernel	Version 2.6.12
Linux Linux Kernel	Version 2.6.12 rc1
Linux Linux Kernel	Version 2.6.12 rc2
Linux Linux Kernel	Version 2.6.12 rc3
Linux Linux Kernel	Version 2.6.12 rc4
Linux Linux Kernel	Version 2.6.12 rc5
Linux Linux Kernel	Version 2.6.12 rc6
Linux Linux Kernel	Version 2.6.13.1
Linux Linux Kernel	Version 2.6.13.2
Linux Linux Kernel	Version 2.6.13.3
Linux Linux Kernel	Version 2.6.13.4
Linux Linux Kernel	Version 2.6.13.5
Linux Linux Kernel	Version 2.6.13
Linux Linux Kernel	Version 2.6.13 rc1
Linux Linux Kernel	Version 2.6.13 rc2
Linux Linux Kernel	Version 2.6.13 rc3
Linux Linux Kernel	Version 2.6.13 rc4
Linux Linux Kernel	Version 2.6.13 rc5
Linux Linux Kernel	Version 2.6.13 rc6
Linux Linux Kernel	Version 2.6.13 rc7
Linux Linux Kernel	Version 2.6.14.1
Linux Linux Kernel	Version 2.6.14.2
Linux Linux Kernel	Version 2.6.14.3
Linux Linux Kernel	Version 2.6.14.4
Linux Linux Kernel	Version 2.6.14.5
Linux Linux Kernel	Version 2.6.14.6
Linux Linux Kernel	Version 2.6.14.7
Linux Linux Kernel	Version 2.6.14
Linux Linux Kernel	Version 2.6.14 rc1
Linux Linux Kernel	Version 2.6.14 rc2
Linux Linux Kernel	Version 2.6.14 rc3
Linux Linux Kernel	Version 2.6.14 rc4
Linux Linux Kernel	Version 2.6.14 rc5
Linux Linux Kernel	Version 2.6.15.1
Linux Linux Kernel	Version 2.6.15.2
Linux Linux Kernel	Version 2.6.15.3
Linux Linux Kernel	Version 2.6.15.4
Linux Linux Kernel	Version 2.6.15.5
Linux Linux Kernel	Version 2.6.15.6
Linux Linux Kernel	Version 2.6.15.7
Linux Linux Kernel	Version 2.6.15
Linux Linux Kernel	Version 2.6.15 rc1
Linux Linux Kernel	Version 2.6.15 rc2
Linux Linux Kernel	Version 2.6.15 rc3
Linux Linux Kernel	Version 2.6.15 rc4
Linux Linux Kernel	Version 2.6.15 rc5
Linux Linux Kernel	Version 2.6.15 rc6
Linux Linux Kernel	Version 2.6.15 rc7
Linux Linux Kernel	Version 2.6.16.10
Linux Linux Kernel	Version 2.6.16.11
Linux Linux Kernel	Version 2.6.16.12
Linux Linux Kernel	Version 2.6.16.13
Linux Linux Kernel	Version 2.6.16.14
Linux Linux Kernel	Version 2.6.16.15
Linux Linux Kernel	Version 2.6.16.16
Linux Linux Kernel	Version 2.6.16.17
Linux Linux Kernel	Version 2.6.16.18
Linux Linux Kernel	Version 2.6.16.19
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.20
Linux Linux Kernel	Version 2.6.16.21
Linux Linux Kernel	Version 2.6.16.22
Linux Linux Kernel	Version 2.6.16.23
Linux Linux Kernel	Version 2.6.16.24
Linux Linux Kernel	Version 2.6.16.25
Linux Linux Kernel	Version 2.6.16.26
Linux Linux Kernel	Version 2.6.16.27
Linux Linux Kernel	Version 2.6.16.28
Linux Linux Kernel	Version 2.6.16.29
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.30
Linux Linux Kernel	Version 2.6.16.31
Linux Linux Kernel	Version 2.6.16.32
Linux Linux Kernel	Version 2.6.16.33
Linux Linux Kernel	Version 2.6.16.34
Linux Linux Kernel	Version 2.6.16.35
Linux Linux Kernel	Version 2.6.16.36
Linux Linux Kernel	Version 2.6.16.37
Linux Linux Kernel	Version 2.6.16.38
Linux Linux Kernel	Version 2.6.16.39
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.40
Linux Linux Kernel	Version 2.6.16.41
Linux Linux Kernel	Version 2.6.16.42
Linux Linux Kernel	Version 2.6.16.43
Linux Linux Kernel	Version 2.6.16.44
Linux Linux Kernel	Version 2.6.16.45
Linux Linux Kernel	Version 2.6.16.46
Linux Linux Kernel	Version 2.6.16.47
Linux Linux Kernel	Version 2.6.16.48
Linux Linux Kernel	Version 2.6.16.49
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16.50
Linux Linux Kernel	Version 2.6.16.51
Linux Linux Kernel	Version 2.6.16.52
Linux Linux Kernel	Version 2.6.16.53
Linux Linux Kernel	Version 2.6.16.54
Linux Linux Kernel	Version 2.6.16.55
Linux Linux Kernel	Version 2.6.16.56
Linux Linux Kernel	Version 2.6.16.57
Linux Linux Kernel	Version 2.6.16.58
Linux Linux Kernel	Version 2.6.16.59
Linux Linux Kernel	Version 2.6.16.5
Linux Linux Kernel	Version 2.6.16.60
Linux Linux Kernel	Version 2.6.16.61
Linux Linux Kernel	Version 2.6.16.62
Linux Linux Kernel	Version 2.6.16.6
Linux Linux Kernel	Version 2.6.16.7
Linux Linux Kernel	Version 2.6.16.8
Linux Linux Kernel	Version 2.6.16.9
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.16 rc1
Linux Linux Kernel	Version 2.6.16 rc2
Linux Linux Kernel	Version 2.6.16 rc3
Linux Linux Kernel	Version 2.6.16 rc4
Linux Linux Kernel	Version 2.6.16 rc5
Linux Linux Kernel	Version 2.6.16 rc6
Linux Linux Kernel	Version 2.6.17.10
Linux Linux Kernel	Version 2.6.17.11
Linux Linux Kernel	Version 2.6.17.12
Linux Linux Kernel	Version 2.6.17.13
Linux Linux Kernel	Version 2.6.17.14
Linux Linux Kernel	Version 2.6.17.1
Linux Linux Kernel	Version 2.6.17.2
Linux Linux Kernel	Version 2.6.17.3
Linux Linux Kernel	Version 2.6.17.4
Linux Linux Kernel	Version 2.6.17.5
Linux Linux Kernel	Version 2.6.17.6
Linux Linux Kernel	Version 2.6.17.7
Linux Linux Kernel	Version 2.6.17.8
Linux Linux Kernel	Version 2.6.17.9
Linux Linux Kernel	Version 2.6.17
Linux Linux Kernel	Version 2.6.17 rc1
Linux Linux Kernel	Version 2.6.17 rc2
Linux Linux Kernel	Version 2.6.17 rc3
Linux Linux Kernel	Version 2.6.17 rc4
Linux Linux Kernel	Version 2.6.17 rc5
Linux Linux Kernel	Version 2.6.17 rc6
Linux Linux Kernel	Version 2.6.18.1
Linux Linux Kernel	Version 2.6.18.2
Linux Linux Kernel	Version 2.6.18.3
Linux Linux Kernel	Version 2.6.18.4
Linux Linux Kernel	Version 2.6.18.5
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.2 rc1
Linux Linux Kernel	Version 2.6.2 rc2
Linux Linux Kernel	Version 2.6.2 rc3
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.3 rc1
Linux Linux Kernel	Version 2.6.3 rc2
Linux Linux Kernel	Version 2.6.3 rc3
Linux Linux Kernel	Version 2.6.3 rc4
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.4 rc1
Linux Linux Kernel	Version 2.6.4 rc2
Linux Linux Kernel	Version 2.6.4 rc3
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.5 rc1
Linux Linux Kernel	Version 2.6.5 rc2
Linux Linux Kernel	Version 2.6.5 rc3
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.6 rc1
Linux Linux Kernel	Version 2.6.6 rc2
Linux Linux Kernel	Version 2.6.6 rc3
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.7 rc1
Linux Linux Kernel	Version 2.6.7 rc2
Linux Linux Kernel	Version 2.6.7 rc3
Linux Linux Kernel	Version 2.6.8.1
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.8 rc1
Linux Linux Kernel	Version 2.6.8 rc2
Linux Linux Kernel	Version 2.6.8 rc3
Linux Linux Kernel	Version 2.6.8 rc4
Linux Linux Kernel	Version 2.6.9
Linux Linux Kernel	Version 2.6.9 rc1
Linux Linux Kernel	Version 2.6.9 rc2
Linux Linux Kernel	Version 2.6.9 rc3
Linux Linux Kernel	Version 2.6.9 rc4

Configuration C

14 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.19.1
Linux Linux Kernel	Version 2.6.19.2
Linux Linux Kernel	Version 2.6.19.3
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.19
Linux Linux Kernel	Version 2.6.19 rc1
Linux Linux Kernel	Version 2.6.19 rc2
Linux Linux Kernel	Version 2.6.19 rc3
Linux Linux Kernel	Version 2.6.19 rc4
Linux Linux Kernel	Version 2.6.19 rc5
Linux Linux Kernel	Version 2.6.19 rc6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (82)

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5

Source: secalert@redhat.com

Patch

http://marc.info/?l=linux-kernel&m=116614741607528&w=2

Source: secalert@redhat.com

http://marc.info/?l=linux-kernel&m=116648929829440&w=2

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0014.html

Source: secalert@redhat.com

http://secunia.com/advisories/23408

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/23427

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/23593

Source: secalert@redhat.com

http://secunia.com/advisories/23609

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23752

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23997

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24098

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24105

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24206

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24547

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25226

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25683

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25691

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25714

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27227

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29058

Source: secalert@redhat.com

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1304

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1503

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:002

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:012

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:025

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_18_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_21_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_30_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_35_kernel.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_53_kernel.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/459615/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/471457

Source: secalert@redhat.com

http://www.securityfocus.com/bid/21604

Source: secalert@redhat.com

http://www.trustix.org/errata/2007/0002/

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-416-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/5037

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218602

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/30912

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-848

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10891

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.5