Main
Vulnerability Database
Exploits
ID:10370 - Exploit for Improper input validation in Linux kernel - CVE-2006-5757
ID:10370 - Exploit for Improper input validation in Linux kernel - CVE-2006-5757
Published: August 10, 2024
Vulnerability identifier: #VU95751
Vulnerability risk: Low
CVE-ID: CVE-2006-5757
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to perform service disruption.
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.
Remediation
Install update from vendor's repository.