← back
CVE-2006-5757

CVE-2006-5757

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.8%
from disclosure to weapon0 days
Published on NVDNov 6
1st PoCNov 5
exploitation probability
0.8%top 47% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28912
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://projects.info-pull.com/mokb/MOKB-05-11-2006.htmlhttp://rhn.redhat.com/errata/RHSA-2007-0014.htmlhttp://secunia.com/advisories/22702http://secunia.com/advisories/22746http://secunia.com/advisories/23474http://secunia.com/advisories/23593http://secunia.com/advisories/23752http://secunia.com/advisories/23997http://secunia.com/advisories/24098http://secunia.com/advisories/24206http://secunia.com/advisories/25691http://secunia.com/advisories/25714