CVE - CVE-2006-2935

CVE-ID
CVE-2006-2935	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:18847 URL:http://www.securityfocus.com/bid/18847 MISC:20060831 rPSA-2006-0162-1 kernel URL:http://www.securityfocus.com/archive/1/444887/100/0/threaded MISC:21179 URL:http://secunia.com/advisories/21179 MISC:21298 URL:http://secunia.com/advisories/21298 MISC:21498 URL:http://secunia.com/advisories/21498 MISC:21605 URL:http://secunia.com/advisories/21605 MISC:21614 URL:http://secunia.com/advisories/21614 MISC:21695 URL:http://secunia.com/advisories/21695 MISC:21934 URL:http://secunia.com/advisories/21934 MISC:22082 URL:http://secunia.com/advisories/22082 MISC:22093 URL:http://secunia.com/advisories/22093 MISC:22174 URL:http://secunia.com/advisories/22174 MISC:22497 URL:http://secunia.com/advisories/22497 MISC:22822 URL:http://secunia.com/advisories/22822 MISC:23064 URL:http://secunia.com/advisories/23064 MISC:23788 URL:http://secunia.com/advisories/23788 MISC:24288 URL:http://secunia.com/advisories/24288 MISC:ADV-2006-2680 URL:~~http://www.vupen.com/english/advisories/2006/2680~~ (Obsolete source) MISC:DSA-1183 URL:http://www.debian.org/security/2006/dsa-1183 MISC:DSA-1184 URL:http://www.debian.org/security/2006/dsa-1184 MISC:MDKSA-2006:150 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:150~~ (Obsolete source) MISC:MDKSA-2006:151 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:151~~ (Obsolete source) MISC:RHSA-2006:0617 URL:http://www.redhat.com/support/errata/RHSA-2006-0617.html MISC:RHSA-2006:0710 URL:http://www.redhat.com/support/errata/RHSA-2006-0710.html MISC:RHSA-2007:0012 URL:http://www.redhat.com/support/errata/RHSA-2007-0012.html MISC:RHSA-2007:0013 URL:http://www.redhat.com/support/errata/RHSA-2007-0013.html MISC:SUSE-SA:2006:042 URL:http://www.novell.com/linux/security/advisories/2006_42_kernel.html MISC:SUSE-SA:2006:047 URL:http://www.novell.com/linux/security/advisories/2006_47_kernel.html MISC:SUSE-SA:2006:049 URL:http://www.novell.com/linux/security/advisories/2006_49_kernel.html MISC:SUSE-SA:2006:064 URL:http://www.novell.com/linux/security/advisories/2006_64_kernel.html MISC:USN-331-1 URL:http://www.ubuntu.com/usn/usn-331-1 MISC:USN-346-1 URL:http://www.ubuntu.com/usn/usn-346-1 MISC:http://bugzilla.kernel.org/show_bug.cgi?id=2966 URL:http://bugzilla.kernel.org/show_bug.cgi?id=2966 MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm MISC:http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm MISC:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670 URL:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670 MISC:https://issues.rpath.com/browse/RPL-611 URL:https://issues.rpath.com/browse/RPL-611 MISC:linux-dvdreadbca-bo(27579) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/27579 MISC:oval:org.mitre.oval:def:10886 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886
Assigning CNA
Red Hat, Inc.
Date Record Created
20060609	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060609)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)