CVE-2006-1368

2006-03-2300:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.068

Percentile

93.9%

JSON

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel
before 2.6.16 allows remote attackers to cause a denial of service
(kmalloc’d memory corruption) via a remote NDIS response to
OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply
data but not the reply structure.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-29.58UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.40UNKNOWN