CVE-2006-5749

Description

The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash.

1.7

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.07%

Vendor Advisory trustix.org Vendor Advisory mandriva.com Vendor Advisory mandriva.com Vendor Advisory novell.com Vendor Advisory mandriva.com Vendor Advisory ubuntu.com Vendor Advisory novell.com Vendor Advisory novell.com Vendor Advisory novell.com

Affected: n/a n/a

References

Link	Tags
http://www.trustix.org/errata/2007/0002/	vendor advisory
http://secunia.com/advisories/24098	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025	vendor advisory
http://www.kernel.org/git/?p=linux/kernel/git/wtarreau/linux-2.4.git%3Ba=commitdiff%3Bh=05dca9b77f99d80cf615075624666106d5b61727
http://secunia.com/advisories/23609	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:012	vendor advisory
http://www.novell.com/linux/security/advisories/2007_21_kernel.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:040	vendor advisory
http://www.ubuntu.com/usn/usn-416-1	vendor advisory
http://secunia.com/advisories/24100	third party advisory
http://secunia.com/advisories/25226	third party advisory
http://secunia.com/advisories/23752	third party advisory
http://secunia.com/advisories/25683	third party advisory
http://www.securityfocus.com/archive/1/471457	mailing list
http://www.securityfocus.com/bid/21883	vdb entry
http://www.novell.com/linux/security/advisories/2007_18_kernel.html	vendor advisory
http://secunia.com/advisories/23529	third party advisory patch
http://www.securityfocus.com/bid/21835	vdb entry
http://secunia.com/advisories/24547	third party advisory
http://www.novell.com/linux/security/advisories/2007_30_kernel.html	vendor advisory
http://www.novell.com/linux/security/advisories/2007_35_kernel.html	vendor advisory
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34
http://secunia.com/advisories/25691	third party advisory

Frequently Asked Questions

What is the severity of CVE-2006-5749?: CVE-2006-5749 has been scored as a low severity vulnerability.
How to fix CVE-2006-5749?: To fix CVE-2006-5749, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-5749 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2006-5749 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.