National Cyber-Alert System

Vulnerability Summary for CVE-2006-2936

Overview

The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610

Hyperlink:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197610

External Source: BID

Name: 19033

Hyperlink:http://www.securityfocus.com/bid/19033

External Source: BUGTRAQ

Name: 20060717 rPSA-2006-0130-1 kernel

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/440300/100/0/threaded

External Source: CONFIRM

Name: http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git;a=blob;h=4b4d9cfea17618b80d3ac785b701faeaf60141f1;hb=396eb2aac550ec55856c6843ef9017e800c3d656

Hyperlink:http://www.kernel.org/git/?p=linux/kernel/git/gregkh/patches.git;a=blob;h=4b4d9cfea17618b80d3ac785b701faeaf60141f1;hb=396eb2aac550ec55856c6843ef9017e800c3d656

External Source: VUPEN

Name: ADV-2006-2841

Hyperlink:http://www.frsirt.com/english/advisories/2006/2841

External Source: SECUNIA

Name: 20703

Hyperlink:http://secunia.com/advisories/20703

External Source: XF

Name: linux-ftdi-sio-dos(27807)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27807

External Source: UBUNTU

Name: USN-346-1

Hyperlink:http://www.ubuntu.com/usn/usn-346-1

External Source: UBUNTU

Name: USN-331-1

Hyperlink:http://www.ubuntu.com/usn/usn-331-1

External Source: REDHAT

Name: RHSA-2006:0617

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0617.html

External Source: OSVDB

Name: 27119

Hyperlink:http://www.osvdb.org/27119

External Source: SUSE

Name: SUSE-SA:2007:035

Hyperlink:http://www.novell.com/linux/security/advisories/2007_35_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:030

Hyperlink:http://www.novell.com/linux/security/advisories/2007_30_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:021

Hyperlink:http://www.novell.com/linux/security/advisories/2007_21_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:018

Hyperlink:http://www.novell.com/linux/security/advisories/2007_18_kernel.html

External Source: MANDRIVA

Name: MDKSA-2006:151

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:151

External Source: MANDRIVA

Name: MDKSA-2006:150

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

External Source: DEBIAN

Name: DSA-1184

Hyperlink:http://www.debian.org/security/2006/dsa-1184

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

External Source: SECUNIA

Name: 25683

Hyperlink:http://secunia.com/advisories/25683

External Source: SECUNIA

Name: 25226

Hyperlink:http://secunia.com/advisories/25226

External Source: SECUNIA

Name: 24547

Hyperlink:http://secunia.com/advisories/24547

External Source: SECUNIA

Name: 22174

Hyperlink:http://secunia.com/advisories/22174

External Source: SECUNIA

Name: 22093

Hyperlink:http://secunia.com/advisories/22093

External Source: SECUNIA

Name: 21934

Hyperlink:http://secunia.com/advisories/21934

External Source: SECUNIA

Name: 21614

Hyperlink:http://secunia.com/advisories/21614

External Source: SECUNIA

Name: 21605

Hyperlink:http://secunia.com/advisories/21605

External Source: SECUNIA

Name: 21298

Hyperlink:http://secunia.com/advisories/21298

External Source: SECUNIA

Name: 21057

Hyperlink:http://secunia.com/advisories/21057

External Source: MANDRIVA

Name: MDKSA-2006:151

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:151

External Source: MANDRIVA

Name: MDKSA-2006:150

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:150