NVD

Id
63780  
Name
CVE-2006-5174  
Description
The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-5174  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332434 63780 CVE-2006-5174 [linux-kernel] 20061105 Linux 2.6.16.31-rc1  View
332435 63780 CVE-2006-5174 oval:org.mitre.oval:def:9885  View
332436 63780 CVE-2006-5174 RHSA-2007:0014  View
332437 63780 CVE-2006-5174 1017090  View
332438 63780 CVE-2006-5174 http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm  View
332439 63780 CVE-2006-5174 http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm  View
332440 63780 CVE-2006-5174 http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=52149ba6b0ddf3e9d965257cc0513193650b3ea8  View
332441 63780 CVE-2006-5174 SUSE-SA:2006:079  View
332442 63780 CVE-2006-5174 RHSA-2006:0710  View
332443 63780 CVE-2006-5174 20379  View
332444 63780 CVE-2006-5174 DSA-1233  View
332445 63780 CVE-2006-5174 DSA-1237  View
332446 63780 CVE-2006-5174 ADV-2006-3938  View
332447 63780 CVE-2006-5174 kernel-copyfromuser-information-disclosure(29378)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58500 JVNDB-2006-000696 Linux Kernel (s390) の copy_from_user() 関数における情報漏洩の脆弱性 s390 システム上の Linux Kernel では、copy_from_user(） 関数の実装に不備が存在するため、カーネルメモリの一部が読み取られる脆弱性が存在します。 CVE-2006-5174 21276 CVE-2006-5174 63780 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000696.html 2006-10-16 2007-04-01 View