NVD

Id
59778  
Name
CVE-2006-1056  
Description
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-04-20  
Modified Date
2016-11-21  
Seq
2006-1056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307454 59778 CVE-2006-1056 FreeBSD-SA-06:14  View
307455 59778 CVE-2006-1056 http://kb.vmware.com/kb/2533126  View
307456 59778 CVE-2006-1056 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9  View
307457 59778 CVE-2006-1056 SUSE-SU-2014:0446  View
307458 59778 CVE-2006-1056 FEDORA-2006-423  View
307459 59778 CVE-2006-1056 [linux-kernel] 20060419 RE: Linux 2.6.16.9  View
307460 59778 CVE-2006-1056 oval:org.mitre.oval:def:9995  View
307461 59778 CVE-2006-1056 http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt  View
307462 59778 CVE-2006-1056 1015966  View
307463 59778 CVE-2006-1056 http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm  View
307464 59778 CVE-2006-1056 http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm  View
307465 59778 CVE-2006-1056 DSA-1097  View
307466 59778 CVE-2006-1056 DSA-1103  View
307467 59778 CVE-2006-1056 SUSE-SA:2006:028  View
307468 59778 CVE-2006-1056 RHSA-2006:0437  View
307469 59778 CVE-2006-1056 RHSA-2006:0575  View
307470 59778 CVE-2006-1056 RHSA-2006:0579  View
307471 59778 CVE-2006-1056 20060419 FreeBSD Security Advisory FreeBSD-SA-06:14.fpu  View
307472 59778 CVE-2006-1056 20061113 VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4  View
307473 59778 CVE-2006-1056 20061113 VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2  View
307474 59778 CVE-2006-1056 20061113 VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1  View
307475 59778 CVE-2006-1056 20061113 VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue  View
307476 59778 CVE-2006-1056 17600  View
307477 59778 CVE-2006-1056 USN-302-1  View
307478 59778 CVE-2006-1056 http://www.vmware.com/download/esx/esx-213-200610-patch.html  View
307479 59778 CVE-2006-1056 http://www.vmware.com/download/esx/esx-254-200610-patch.html  View
307480 59778 CVE-2006-1056 ADV-2006-1426  View
307481 59778 CVE-2006-1056 ADV-2006-1475  View
307482 59778 CVE-2006-1056 ADV-2006-2554  View
307483 59778 CVE-2006-1056 ADV-2006-4353  View
307484 59778 CVE-2006-1056 ADV-2006-4502  View
307485 59778 CVE-2006-1056 amd-fpu-information-disclosure(25871)  View
307486 59778 CVE-2006-1056 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910  View
307487 59778 CVE-2006-1056 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58028 JVNDB-2006-000224 AMD プロセッサにより動作する Linux Kernel における情報漏洩の脆弱性 Linux Kernel には、AMD プロセッサと Intel プロセッサにおける FXSAVE、FXRSTOR 命令の振る舞いの違いを考慮していない不備があり、AMD プロセッサ上で動作するシステムでは、特定の状況下において、x87 レジスタ (FOP, FIP, FDP) の退避・復元が適切に行われない脆弱性が存在します。 CVE-2006-1056 17158 CVE-2006-1056 59778 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000224.html 2006-04-19 2007-04-01 View