CVE-2006-0095: Low severity Linux Linux kernel vulnerability
Published Jan 6, 2006
·Updated
dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.
Affected Software
47 affected components
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.14-rc2
Linux Linux kernel=2.6.11.2
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.11.10
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.13
Linux Linux kernel=2.6.15-rc4
Linux Linux kernel=2.6.11.8
Linux Linux kernel=2.6.14.4
Linux Linux kernel=2.6.14
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.14.3
Linux Linux kernel=2.6.11.6
Linux Linux kernel=2.6.11.11
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.11.5
Linux Linux kernel=2.6.15-rc5
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.14-rc3
Linux Linux kernel=2.6.15-rc3
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.14.1
Linux Linux kernel=2.6.12.1
Linux Linux kernel=2.6.11.9
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.12.2
Linux Linux kernel=2.6.14-rc1
Linux Linux kernel=2.6.12.4
Linux Linux kernel=2.6.11.3
Linux Linux kernel=2.6.12.3
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.11.7
Linux Linux kernel=2.6.15
Linux Linux kernel=2.6.15-rc6
Linux Linux kernel=2.6.15-rc1
Linux Linux kernel=2.6.14.2
Linux Linux kernel=2.6.14-rc4
Linux Linux kernel=2.6.15-rc7
Linux Linux kernel=2.6.8.1
Linux Linux kernel=2.6.11.4
Linux Linux kernel=2.6.11.12
Linux Linux kernel=2.6.11.1
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.12
Event History
Jan 6, 2006
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0095?
CVE-2006-0095 is classified as a medium severity vulnerability due to its potential for exposing sensitive information.
2
How do I fix CVE-2006-0095?
To fix CVE-2006-0095, upgrade your Linux kernel to a version later than 2.6.15 or apply the relevant patches.
3
Who is affected by CVE-2006-0095?
Local users of Linux kernel versions 2.6.0 to 2.6.15 are affected by CVE-2006-0095.
4
What does CVE-2006-0095 exploit?
CVE-2006-0095 exploits a failure to clear memory in the dm-crypt component, resulting in memory disclosure.
5
Is CVE-2006-0095 a remote vulnerability?
No, CVE-2006-0095 is a local vulnerability that requires local user access to exploit.