Vulnerabilities > Linux > Linux Kernel > 2.6.16.5

DATE CVE VULNERABILITY TITLE RISK
2006-05-22 CVE-2006-1858 Improper Input Validation vulnerability in Linux Kernel
SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with the actual length of provided parameters.
network
low complexity
linux CWE-20
7.8
2006-05-22 CVE-2006-1857 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Linux Kernel
Buffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed HB-ACK chunk.
network
low complexity
linux CWE-119
critical
9.0
2006-04-20 CVE-2006-1056 Cryptographic Issues vulnerability in multiple products
The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys.
local
low complexity
freebsd linux CWE-310
2.1
2006-04-19 CVE-2006-1525 Resource Management Errors vulnerability in Linux Kernel
ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a multicast IP address, which triggers a null dereference.
local
low complexity
linux CWE-399
4.9
2006-04-19 CVE-2006-1524 Permissions, Privileges, and Access Controls vulnerability in Linux Kernel
madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC permissions and replace portions of readonly tmpfs files with zeroes, aka the MADV_REMOVE vulnerability.
local
low complexity
linux CWE-264
3.6