CVE-2006-0454

Published Feb 7, 2006 CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed
Description
Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote attackers to cause a denial of service (crash) via vectors such as (1) record-route and (2) timestamp IP options with the needaddr bit set and a truncated value.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2006-0461 Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote attackers to cause a denial of service (crash) via vectors such as (1) record-route and (2) timestamp IP options with the needaddr bit set and a truncated value.
Ubuntu USN Ubuntu USN USN-250-1 Linux kernel vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 4:34 PM
Reserved
Jan 27, 2006, 12:00 AM
Status
Modified
Published
Feb 7, 2006, 6:06 PM
Modified
Jun 16, 2026, 10:20 PM