Linux Kernel CD-ROM Driver本地缓冲区错误漏洞

漏洞信息详情

Linux Kernel CD-ROM Driver本地缓冲区错误漏洞

• CNNVD编号：CNNVD-200607-021
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2006-2935
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2006-07-05
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2020-09-01
  
• 厂        商：
  
  linux
• 漏洞来源：
  Marcus Meissner di…

Linux kernel 2.2.16及以后版本的drivers/cdrom/cdrom.c的DVD处理代码中的dvd_read_bca函数对长度变量指定的值有误。本地用户可以借助能触发缓冲区溢出的USB存储装置，执行任意代码。

S.u.S.E. Linux Professional 10.1

SuSE apparmor-admin_en-10-7.5.noarch.rpmSUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-admin_en-1

0-7.5.noarch.rpm

SuSE apparmor-docs-2.0-17.5.noarch.rpmSUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-docs-2.0-1

7.5.noarch.rpm

SuSE apparmor-profiles-2.0-34.9.noarch.rpmSUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-profiles-2.0-34.9.noarch.rpm

SuSE apparmor-utils-2.0-23.5.noarch.rpmSUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/apparmor-utils-2.0-

23.5.noarch.rpm

SuSE yast2-apparmor-2.0-27.5.noarch.rpmSUSE LINUX 10.1:

ftp://ftp.suse.com/pub/suse/update/10.1/rpm/noarch/yast2-apparmor-2.0-

27.5.noarch.rpm

Linux kernel 2.6 -test6

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6 -test4

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6 -test2

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6 -test9-CVS

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6 -test7

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6 -test9

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6 -test10

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.1 -rc2

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.1

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.10 rc2

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.10

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Ubuntu ide-modules-2.6.12-10-amd64-generic-di_2.6.12-10.32_amd64.udebUbuntu 5.10:

http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.12/ide-

modules-2.6.12-10-amd64-generic-di_2.6.12-10.32_amd64.udeb

Linux kernel 2.6.11 -rc3

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.11 .11

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.12 .4

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.12 .1

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.12 -rc4

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.12 .2

Linux linux-2.6.16.tar.bz2

http://kernel.org/pub/linux/kernel/v2.6/linux-2.6.16.tar.bz2

Linux kernel 2.6.13 -rc4

Linux linux-2.6.16.tar.

来源:SECUNIA

链接:http://secunia.com/advisories/23788

来源:SECUNIA

链接:http://secunia.com/advisories/22497

来源:SECUNIA

链接:http://secunia.com/advisories/21605

来源:MANDRIVA

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:151

来源:MANDRIVA

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

来源:CONFIRM

链接:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670

来源:UBUNTU

链接:http://www.ubuntu.com/usn/usn-331-1

来源:SUSE

链接:http://www.novell.com/linux/security/advisories/2006_47_kernel.html

来源:CONFIRM

链接:https://issues.rpath.com/browse/RPL-611

来源:SUSE

链接:http://www.novell.com/linux/security/advisories/2006_49_kernel.html

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2007-0013.html

来源:SECUNIA

链接:http://secunia.com/advisories/24288

来源:SECUNIA

链接:http://secunia.com/advisories/22082

来源:DEBIAN

链接:https://www.debian.org/security/2006/dsa-1183

来源:DEBIAN

链接:https://www.debian.org/security/2006/dsa-1184

来源:SECUNIA

链接:http://secunia.com/advisories/21179

来源:SECUNIA

链接:http://secunia.com/advisories/21498

来源:SECUNIA

链接:http://secunia.com/advisories/21695

来源:SECUNIA

链接:http://secunia.com/advisories/21298

来源:VUPEN

链接:http://www.vupen.com/english/advisories/2006/2680

来源:SECUNIA

链接:http://secunia.com/advisories/22822

来源:SECUNIA

链接:http://secunia.com/advisories/21934

来源:SECUNIA

链接:http://secunia.com/advisories/21614

来源:BUGTRAQ

链接:http://www.securityfocus.com/archive/1/444887/100/0/threaded

来源:CONFIRM

链接:http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm

来源:BID

链接:https://www.securityfocus.com/bid/18847

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2007-0012.html

来源:UBUNTU

链接:http://www.ubuntu.com/usn/usn-346-1

来源:CONFIRM

链接:http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm

来源:CONFIRM

链接:http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm

来源:MISC

链接:http://bugzilla.kernel.org/show_bug.cgi?id=2966

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2006-0710.html

来源:SECUNIA

链接:http://secunia.com/advisories/23064

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/27579

来源:SECUNIA

链接:http://secunia.com/advisories/22174

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2006-0617.html

来源:SECUNIA

链接:http://secunia.com/advisories/22093

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886

来源:SUSE

链接:http://www.novell.com/linux/security/advisories/2006_42_kernel.html

来源:SUSE

链接:http://www.novell.com/linux/security/advisories/2006_64_kernel.html