CVE

Id
17160  
CVE No.
CVE-2006-1056  
Status
Candidate  
Description
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.  
Phase
Assigned (20060307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
140636 17160 CVE-2006-1056 BUGTRAQ:20060419 FreeBSD Security Advisory FreeBSD-SA-06:14.fpu  View
140637 17160 CVE-2006-1056 URL:http://www.securityfocus.com/archive/1/431341  View
140638 17160 CVE-2006-1056 BUGTRAQ:20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4  View
140639 17160 CVE-2006-1056 URL:http://www.securityfocus.com/archive/1/archive/1/451404/100/0/threaded  View
140640 17160 CVE-2006-1056 BUGTRAQ:20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1  View
140641 17160 CVE-2006-1056 URL:http://www.securityfocus.com/archive/1/archive/1/451419/100/200/threaded  View
140642 17160 CVE-2006-1056 BUGTRAQ:20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2  View
140643 17160 CVE-2006-1056 URL:http://www.securityfocus.com/archive/1/archive/1/451417/100/200/threaded  View
140644 17160 CVE-2006-1056 BUGTRAQ:20061113 VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue  View
140645 17160 CVE-2006-1056 URL:http://www.securityfocus.com/archive/1/archive/1/451421/100/0/threaded  View
140646 17160 CVE-2006-1056 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm  View
140647 17160 CVE-2006-1056 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm  View
140648 17160 CVE-2006-1056 CONFIRM:http://kb.vmware.com/kb/2533126  View
140649 17160 CVE-2006-1056 CONFIRM:http://www.vmware.com/download/esx/esx-213-200610-patch.html  View
140650 17160 CVE-2006-1056 CONFIRM:http://www.vmware.com/download/esx/esx-254-200610-patch.html  View
140651 17160 CVE-2006-1056 DEBIAN:DSA-1097  View
140652 17160 CVE-2006-1056 URL:http://www.debian.org/security/2006/dsa-1097  View
140653 17160 CVE-2006-1056 DEBIAN:DSA-1103  View
140654 17160 CVE-2006-1056 URL:http://www.debian.org/security/2006/dsa-1103  View
140655 17160 CVE-2006-1056 FEDORA:FEDORA-2006-423  View
140656 17160 CVE-2006-1056 URL:http://lwn.net/Alerts/180820/  View
140657 17160 CVE-2006-1056 FREEBSD:FreeBSD-SA-06:14  View
140658 17160 CVE-2006-1056 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc  View
140659 17160 CVE-2006-1056 MISC:http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt  View
140660 17160 CVE-2006-1056 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9  View
140661 17160 CVE-2006-1056 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910  View
140662 17160 CVE-2006-1056 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911  View
140663 17160 CVE-2006-1056 MLIST:[linux-kernel] 20060419 RE: Linux 2.6.16.9  View
140664 17160 CVE-2006-1056 URL:http://marc.info/?l=linux-kernel&m=114548768214478&w=2  View
140665 17160 CVE-2006-1056 REDHAT:RHSA-2006:0579  View
140666 17160 CVE-2006-1056 URL:http://www.redhat.com/support/errata/RHSA-2006-0579.html  View
140667 17160 CVE-2006-1056 REDHAT:RHSA-2006:0437  View
140668 17160 CVE-2006-1056 URL:http://www.redhat.com/support/errata/RHSA-2006-0437.html  View
140669 17160 CVE-2006-1056 REDHAT:RHSA-2006:0575  View
140670 17160 CVE-2006-1056 URL:http://www.redhat.com/support/errata/RHSA-2006-0575.html  View
140671 17160 CVE-2006-1056 SUSE:SUSE-SA:2006:028  View
140672 17160 CVE-2006-1056 URL:http://www.novell.com/linux/security/advisories/2006-05-31.html  View
140673 17160 CVE-2006-1056 SUSE:SUSE-SU-2014:0446  View
140674 17160 CVE-2006-1056 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html  View
140675 17160 CVE-2006-1056 UBUNTU:USN-302-1  View
140676 17160 CVE-2006-1056 URL:http://www.ubuntu.com/usn/usn-302-1  View
140677 17160 CVE-2006-1056 BID:17600  View
140678 17160 CVE-2006-1056 URL:http://www.securityfocus.com/bid/17600  View
140679 17160 CVE-2006-1056 OVAL:oval:org.mitre.oval:def:9995  View
140680 17160 CVE-2006-1056 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9995  View
140681 17160 CVE-2006-1056 VUPEN:ADV-2006-1426  View
140682 17160 CVE-2006-1056 URL:http://www.vupen.com/english/advisories/2006/1426  View
140683 17160 CVE-2006-1056 VUPEN:ADV-2006-2554  View
140684 17160 CVE-2006-1056 URL:http://www.vupen.com/english/advisories/2006/2554  View
140685 17160 CVE-2006-1056 VUPEN:ADV-2006-4353  View
140686 17160 CVE-2006-1056 URL:http://www.vupen.com/english/advisories/2006/4353  View
140687 17160 CVE-2006-1056 VUPEN:ADV-2006-4502  View
140688 17160 CVE-2006-1056 URL:http://www.vupen.com/english/advisories/2006/4502  View
140689 17160 CVE-2006-1056 VUPEN:ADV-2006-1475  View
140690 17160 CVE-2006-1056 URL:http://www.vupen.com/english/advisories/2006/1475  View
140691 17160 CVE-2006-1056 OSVDB:24807  View
140692 17160 CVE-2006-1056 URL:http://www.osvdb.org/24807  View
140693 17160 CVE-2006-1056 OSVDB:24746  View
140694 17160 CVE-2006-1056 URL:http://www.osvdb.org/24746  View
140695 17160 CVE-2006-1056 SECTRACK:1015966  View
140696 17160 CVE-2006-1056 URL:http://securitytracker.com/id?1015966  View
140697 17160 CVE-2006-1056 SECUNIA:19724  View
140698 17160 CVE-2006-1056 URL:http://secunia.com/advisories/19724  View
140699 17160 CVE-2006-1056 SECUNIA:19715  View
140700 17160 CVE-2006-1056 URL:http://secunia.com/advisories/19715  View
140701 17160 CVE-2006-1056 SECUNIA:20671  View
140702 17160 CVE-2006-1056 URL:http://secunia.com/advisories/20671  View
140703 17160 CVE-2006-1056 SECUNIA:20716  View
140704 17160 CVE-2006-1056 URL:http://secunia.com/advisories/20716  View
140705 17160 CVE-2006-1056 SECUNIA:20914  View
140706 17160 CVE-2006-1056 URL:http://secunia.com/advisories/20914  View
140707 17160 CVE-2006-1056 SECUNIA:21035  View
140708 17160 CVE-2006-1056 URL:http://secunia.com/advisories/21035  View
140709 17160 CVE-2006-1056 SECUNIA:21136  View
140710 17160 CVE-2006-1056 URL:http://secunia.com/advisories/21136  View
140711 17160 CVE-2006-1056 SECUNIA:21465  View
140712 17160 CVE-2006-1056 URL:http://secunia.com/advisories/21465  View
140713 17160 CVE-2006-1056 SECUNIA:20398  View
140714 17160 CVE-2006-1056 URL:http://secunia.com/advisories/20398  View
140715 17160 CVE-2006-1056 SECUNIA:21983  View
140716 17160 CVE-2006-1056 URL:http://secunia.com/advisories/21983  View
140717 17160 CVE-2006-1056 SECUNIA:22417  View
140718 17160 CVE-2006-1056 URL:http://secunia.com/advisories/22417  View
140719 17160 CVE-2006-1056 SECUNIA:22875  View
140720 17160 CVE-2006-1056 URL:http://secunia.com/advisories/22875  View
140721 17160 CVE-2006-1056 SECUNIA:22876  View
140722 17160 CVE-2006-1056 URL:http://secunia.com/advisories/22876  View
140723 17160 CVE-2006-1056 SECUNIA:19735  View
140724 17160 CVE-2006-1056 URL:http://secunia.com/advisories/19735  View
140725 17160 CVE-2006-1056 XF:amd-fpu-information-disclosure(25871)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58690 JVNDB-2006-000955 BusyBox の passwd における弱い暗号で MD5 パスワードハッシュが生成される問題 BusyBox の passwd コマンドには、MD5 ハッシュで暗号化されたパスワードを生成する際に、salt を使用しないでパスワードを暗号化してしまう問題が存在します。 CVE-2006-1058 17160 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000955.html  View