CVE-2006-0554: Low severity Linux Linux kernel vulnerability
Published Mar 7, 2006
·Updated
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data.
Affected Software
101 affected components
Linux Linux kernel=2.6.11-rc3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.11
Linux Linux kernel=2.6.12-rc1
Linux Linux kernel=2.6.12-rc4
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.14-rc2
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.11.2
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.11.10
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.13
Linux Linux kernel=2.6.15-rc4
Linux Linux kernel=2.6.13.3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.11.8
Linux Linux kernel=2.6.11_rc1_bk6
Linux Linux kernel=2.6.14.4
Linux Linux kernel=2.6.14
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.10
Linux Linux kernel=2.6.13-rc1
Linux Linux kernel=2.6.14.3
Linux Linux kernel=2.6.13-rc6
Linux Linux kernel=2.6.11.6
Linux Linux kernel=2.6.11.11
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.13-rc7
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.11.5
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.15-rc5
Linux Linux kernel=2.6.13.2
Linux Linux kernel=2.6.12-rc5
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.14-rc3
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.11-rc4
Linux Linux kernel=2.6.15-rc3
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.14.1
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.12.5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.12.1
Linux Linux kernel=2.6.11.9
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.13.4
Linux Linux kernel=2.6.12.2
Linux Linux kernel=2.6.11-rc1
Linux Linux kernel=2.6.14-rc1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.12.4
Linux Linux kernel=2.6.11.3
Linux Linux kernel=2.6.12.3
Linux Linux kernel=2.6.13-rc4
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.11-rc2
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.12.6
Linux Linux kernel=2.6.11.7
Linux Linux kernel=2.6.15
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.15-rc6
Linux Linux kernel=2.6.15-rc1
Linux Linux kernel=2.6.14.2
Linux Linux kernel=2.6.14-rc4
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.15-rc7
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8.1.5
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.11.4
Linux Linux kernel=2.6.11.12
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.11.1
Linux Linux kernel=2.6.13.1
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.12
Remediation
Patch Available
Event History
Mar 7, 2006
CVE Published
02:02 AM
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-0554?
CVE-2006-0554 is rated as a medium severity vulnerability due to the potential for local users to access sensitive information.
2
How do I fix CVE-2006-0554?
To fix CVE-2006-0554, update your Linux kernel to version 2.6.15.5 or later.
3
Who is affected by CVE-2006-0554?
CVE-2006-0554 affects local users running Linux kernel versions before 2.6.15.5.
4
What type of attack does CVE-2006-0554 enable?
CVE-2006-0554 enables local users to obtain sensitive information through a crafted ftruncate call in XFS.
5
Is CVE-2006-0554 still a concern in modern systems?
CVE-2006-0554 primarily affects legacy systems since modern Linux distributions have resolved this vulnerability.