CVE-2006-2936

Linux Kernel 2.6.x-2.6.17 - Denial of Service via ftdi_sio Driver Data Queue Overflow

Title source: llm
STIX 2.1

Description

The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued.

References (30)

Core 30
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20703
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-331-1
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21934
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27807
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19033
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/27119
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2841
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0617.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21298
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21057
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21605
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:150
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_21_kernel.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:151
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25226
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21614
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25683
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22174
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10265
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-346-1
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_18_kernel.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24547
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_30_kernel.html
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2007_35_kernel.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22093
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/440300/100/0/threaded
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1184

Scores

EPSS 0.0296
EPSS Percentile 86.0%

Details

CWE
CWE-399
Status published
Products (13)
linux/linux_kernel 2.6.0
linux/linux_kernel 2.6.1 (4 CPE variants)
linux/linux_kernel 2.6.2 (4 CPE variants)
linux/linux_kernel 2.6.3 (5 CPE variants)
linux/linux_kernel 2.6.4 (4 CPE variants)
linux/linux_kernel 2.6.5 (4 CPE variants)
linux/linux_kernel 2.6.6 (4 CPE variants)
linux/linux_kernel 2.6.7 (4 CPE variants)
linux/linux_kernel 2.6.8 (5 CPE variants)
linux/linux_kernel 2.6.8.1
... and 3 more
Published Jul 10, 2006
Tracked Since Feb 18, 2026