CVE-2006-2936

CVE-2006-2936

High · published July 10, 2006

CVSS v2.0
7.8
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.

The record
Technical detail
CVSS v2.0
7.8 · HIGH
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS v4.0
Not supplied
EPSS
0.02960 · 87.1th percentile
Published
2006-07-10T23:05Z
Affected products (162)
ProductVersionsFixed in
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (60)
http://secunia.com/advisories/20703 · [email protected]http://secunia.com/advisories/21057 · [email protected]http://secunia.com/advisories/21298 · [email protected]http://secunia.com/advisories/21605 · [email protected]http://secunia.com/advisories/21614 · [email protected]http://secunia.com/advisories/21934 · [email protected]http://secunia.com/advisories/22093 · [email protected]http://secunia.com/advisories/22174 · [email protected]http://secunia.com/advisories/24547 · [email protected]http://secunia.com/advisories/25226 · [email protected]http://secunia.com/advisories/25683 · [email protected]http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm · [email protected]http://www.debian.org/security/2006/dsa-1184 · [email protected]http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git%3Ba=blob%3Bh=4b4d9cfea17618b80d3ac785b701faeaf60141f1%3Bhb=396eb2aac550ec55856c6843ef9017e800c3d656 · [email protected]http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 · [email protected]http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 · [email protected]http://www.novell.com/linux/security/advisories/2007_18_kernel.html · [email protected]http://www.novell.com/linux/security/advisories/2007_21_kernel.html · [email protected]http://www.novell.com/linux/security/advisories/2007_30_kernel.html · [email protected]http://www.novell.com/linux/security/advisories/2007_35_kernel.html · [email protected]http://www.osvdb.org/27119 · [email protected]http://www.redhat.com/support/errata/RHSA-2006-0617.html · [email protected]http://www.securityfocus.com/archive/1/440300/100/0/threaded · [email protected]http://www.securityfocus.com/bid/19033 · [email protected]http://www.ubuntu.com/usn/usn-331-1 · [email protected]http://www.ubuntu.com/usn/usn-346-1 · [email protected]http://www.vupen.com/english/advisories/2006/2841 · [email protected]https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/27807 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10265 · [email protected]http://secunia.com/advisories/20703 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21057 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21298 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21605 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21614 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21934 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22093 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22174 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24547 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25226 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25683 · af854a3a-2127-422b-91ae-364da2661108http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2006/dsa-1184 · af854a3a-2127-422b-91ae-364da2661108http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git%3Ba=blob%3Bh=4b4d9cfea17618b80d3ac785b701faeaf60141f1%3Bhb=396eb2aac550ec55856c6843ef9017e800c3d656 · af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 · af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 · af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2007_18_kernel.html · af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2007_21_kernel.html · af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2007_30_kernel.html · af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2007_35_kernel.html · af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27119 · af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2006-0617.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/440300/100/0/threaded · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19033 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/usn-331-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/usn-346-1 · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2841 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27807 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10265 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 10 JUL 19:00Z
    The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service…
    cvelistv5