CVE-2006-3468
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
from disclosure to weapon20 days
Published on NVDJul 18
1st PoC+20d
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28358⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lkml.org/lkml/2006/7/17/41https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=199172http://secunia.com/advisories/21369http://secunia.com/advisories/21605http://secunia.com/advisories/21614http://secunia.com/advisories/21847http://secunia.com/advisories/21934http://secunia.com/advisories/22093http://secunia.com/advisories/22148http://secunia.com/advisories/22174http://secunia.com/advisories/22822https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9809