CVEvulnerability

CVE-2006-0039

4.7 MEDIUM Published 2006-05-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:H/Au:N/C:P/I:N/A:C
Weaknesses
CWE-362

Description

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

Affected configurations

• linux linux kernel 2.6.16

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References