Name: CVE-2006-0039: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2006-05-19T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2006-0039, CWE-362, CVSS 5.3, EPSS 0.00065

Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.

CVSS Details

CVSS 3.1 Base Score: 5.3

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Ubuntu	—	Upgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.12-10-hppa32Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.15-26-amd64-generic	Nov 8, 2024	May 19, 2006

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence