NVD

Id
61143  
Name
CVE-2006-2444  
Description
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2016-12-20  
Published
2006-05-25  
Modified Date
2011-03-07  
Seq
2006-2444  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315928 61143 CVE-2006-2444 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18  View
315929 61143 CVE-2006-2444 oval:org.mitre.oval:def:11318  View
315930 61143 CVE-2006-2444 1016153  View
315931 61143 CVE-2006-2444 http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm  View
315932 61143 CVE-2006-2444 http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm  View
315933 61143 CVE-2006-2444 DSA-1183  View
315934 61143 CVE-2006-2444 DSA-1184  View
315935 61143 CVE-2006-2444 VU#681569  View
315936 61143 CVE-2006-2444 http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git;a=commit;h=1db6b5a66e93ff125ab871d6b3f7363412cc87e8  View
315937 61143 CVE-2006-2444 MDKSA-2006:087  View
315938 61143 CVE-2006-2444 SUSE-SA:2006:042  View
315939 61143 CVE-2006-2444 SUSE-SA:2006:047  View
315940 61143 CVE-2006-2444 SUSE-SA:2006:064  View
315941 61143 CVE-2006-2444 RHSA-2006:0437  View
315942 61143 CVE-2006-2444 RHSA-2006:0580  View
315943 61143 CVE-2006-2444 RHSA-2006:0617  View
315944 61143 CVE-2006-2444 18081  View
315945 61143 CVE-2006-2444 USN-302-1  View
315946 61143 CVE-2006-2444 ADV-2006-1916  View
315947 61143 CVE-2006-2444 linux-snmp-nathelper-dos(26594)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58111 JVNDB-2006-000307 Linux Kernel の snmp_trap_decode() 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の snmp_trap_decode() 関数において、メモリの処理の不備のため、NAT 変換された特定の SNMP パケットを処理する場合に、メモリを無作為あるいは二重に解放してしまうことで、メモリ領域が破壊される脆弱性が存在します。 CVE-2006-2444 18546 CVE-2006-2444 61143 7.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000307.html 2006-05-24 2007-04-01 View