CVE-2006-6106

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4…

published December 19, 2006

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05793 · 93.1th percentile
Published
2006-12-19T19:00Z
EPSS history
Timeline
  • 19 DEC 19:00Z
    Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4…
    cvelistv5