CVE-2006-0482: Low severity Linux Linux kernel vulnerability
Published Jan 31, 2006
·Updated
Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date -s" command, which causes invalid sign extended arguments to be provided to the getcompattimespec function call.
Affected Software
103 affected components
Linux Linux kernel=2.6.11-rc3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.12-rc1
Linux Linux kernel=2.6.12-rc4
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.14-rc2
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.11.2
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.11.10
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.13
Linux Linux kernel=2.6.15-rc4
Linux Linux kernel=2.6.13.3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.11.8
Linux Linux kernel=2.6.11_rc1_bk6
Linux Linux kernel=2.6.14.4
Linux Linux kernel=2.6.14
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.13-rc1
Linux Linux kernel=2.6.14.3
Linux Linux kernel=2.6.13-rc6
Linux Linux kernel=2.6.11.6
Linux Linux kernel=2.6.11.11
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.13-rc7
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6_test9_cvs
Linux Linux kernel=2.6.11.5
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.15-rc5
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.13.2
Linux Linux kernel=2.6.12-rc5
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.14-rc3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.11-rc4
Linux Linux kernel=2.6.15-rc3
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.14.1
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.12.5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.12.1
Linux Linux kernel=2.6.11.9
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.13.4
Linux Linux kernel=2.6.12.2
Linux Linux kernel=2.6.11-rc1
Linux Linux kernel=2.6.14-rc1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.12.4
Linux Linux kernel=2.6.11.3
Linux Linux kernel=2.6.12.3
Linux Linux kernel=2.6.13-rc4
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.11-rc2
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.12.6
Linux Linux kernel=2.6.11.7
Linux Linux kernel=2.6.15
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.15-rc6
Linux Linux kernel=2.6.15-rc1
Linux Linux kernel=2.6.14.2
Linux Linux kernel=2.6.14-rc4
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.15-rc7
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.11.4
Linux Linux kernel=2.6.11.12
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.11.1
Linux Linux kernel=2.6.13.1
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.12
Event History
Jan 31, 2006
CVE Published
07:03 PM
Feb 1, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0482?
CVE-2006-0482 has a severity rating of medium due to its potential to cause a denial of service.
2
Who is affected by CVE-2006-0482?
CVE-2006-0482 affects Linux kernel versions 2.6.15.1 and earlier running on SPARC architectures.
3
What is the impact of CVE-2006-0482?
The impact of CVE-2006-0482 is a denial of service that results in the system hanging when the 'date -s' command is executed.
4
How do I fix CVE-2006-0482?
To fix CVE-2006-0482, upgrade the Linux kernel to a version later than 2.6.15.1.
5
Can CVE-2006-0482 be exploited remotely?
No, CVE-2006-0482 requires local access to the system to be exploited.