CVE catalog

CVE-2006-5823

kernel-image-2.6.8 - several issues

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.38% · Oct 25, 2026

The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs. security flaw The CVE-2006-5823 is about a corrupted cramfs (MOKB-07-11-2006) that can cause a memory corruption and so crash the machine. For Red Hat Enterpise Linux 3 this issue is tracked via Bugzilla #216960 and for Red Hat Enterprise Linux 4 it is tracked via Bugzilla #216958. Red Hat Enterprise Linux 2.1 is not vulnerable to this issue. This issue has been rated as having low impact, because root privileges or physical access to the machine are needed to mount a corrupted filesystem and crash the machine. Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-source-2.4.273.12.4.27-10vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge1vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge2vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge3vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge4vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge5vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge6vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge7fixed
Debiankernel-image-2.6.8-s3903.12.6.8-5vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge1vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge2vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge3vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge4vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge5vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge6vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-5sarge7vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-6vulnerable
Debiankernel-image-2.6.8-s3903.12.6.8-6sarge1fixed
Debiankernel-image-2.6.8-ia643.12.6.8-14vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge1vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge2vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge3vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge4vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge5vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge6vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-14sarge7vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-15vulnerable
Debiankernel-image-2.6.8-ia643.12.6.8-15sarge1fixed
Debianfai-kernels3.11.9.1vulnerable
Debianfai-kernels3.11.9.1sarge1vulnerable
Debianfai-kernels3.11.9.1sarge2vulnerable
Debianfai-kernels3.11.9.1sarge3vulnerable
Debianfai-kernels3.11.9.1sarge4vulnerable
Debianfai-kernels3.11.9.1sarge5vulnerable
Debianfai-kernels3.11.9.1sarge6vulnerable
Debianfai-kernels3.11.9.1sarge7vulnerable
Debianfai-kernels3.11.9.1sarge7.1vulnerable
Debianfai-kernels3.11.9.1sarge8fixed
Debiankernel-image-2.6.8-amd643.12.6.8-14vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-16sarge1vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-16sarge2vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-16sarge4vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-16sarge5vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-16sarge6vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-16sarge7vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-17vulnerable
Debiankernel-image-2.6.8-amd643.12.6.8-17sarge1fixed
Debiankernel-image-2.6.8-hppa3.12.6.8-6vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge1vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge2vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge3vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge4vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge5vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge6vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-6sarge7vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-7vulnerable
Debiankernel-image-2.6.8-hppa3.12.6.8-7sarge1fixed
Debiankernel-image-2.6.8-sparc3.12.6.8-15vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge1vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge2vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge3vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge4vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge5vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge6vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-15sarge7vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-16vulnerable
Debiankernel-image-2.6.8-sparc3.12.6.8-16sarge1fixed
Debiankernel-image-2.6.8-alpha3.12.6.8-16vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge1vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge2vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge3vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge4vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge5vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge6vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-16sarge7vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-17vulnerable
Debiankernel-image-2.6.8-alpha3.12.6.8-17sarge1fixed
Debiankernel-image-2.6.8-i3863.12.6.8-16vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge1vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge2vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge3vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge4vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge5vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge6vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-16sarge7vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-17vulnerable
Debiankernel-image-2.6.8-i3863.12.6.8-17sarge1fixed
Debiankernel-source-2.6.83.12.6.8-16vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge1vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge2vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge3vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge4vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge5vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge6vulnerable
Debiankernel-source-2.6.83.12.6.8-16sarge7vulnerable
Debiankernel-source-2.6.83.12.6.8-17vulnerable
Debiankernel-source-2.6.83.12.6.8-17sarge1fixed
Debiankernel-patch-powerpc-2.6.83.12.6.8-12vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge1vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge2vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge3vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge4vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge5vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge6vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-12sarge7vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-13vulnerable
Debiankernel-patch-powerpc-2.6.83.12.6.8-13sarge1fixed
Debiankernel-image-2.6.8-m68k3.12.6.8-4vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge1vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge2vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge3vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge4vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge5vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge6vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-4sarge7vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-5vulnerable
Debiankernel-image-2.6.8-m68k3.12.6.8-5sarge1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-source-2.4.27deb3.12.4.27-10sarge7Not reportedDSA-1503-2Not reported
Debiankernel-image-2.6.8-s390deb3.12.6.8-6sarge1Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-ia64deb3.12.6.8-15sarge1Not reportedDSA-1504-1Not reported
Debianfai-kernelsdeb3.11.9.1sarge8Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-amd64deb3.12.6.8-17sarge1Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-hppadeb3.12.6.8-7sarge1Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-sparcdeb3.12.6.8-16sarge1Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-alphadeb3.12.6.8-17sarge1Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-i386deb3.12.6.8-17sarge1Not reportedDSA-1504-1Not reported
Debiankernel-source-2.6.8deb3.12.6.8-17sarge1Not reportedDSA-1504-1Not reported
Debiankernel-patch-powerpc-2.6.8deb3.12.6.8-13sarge1Not reportedDSA-1504-1Not reported
Debiankernel-image-2.6.8-m68kdeb3.12.6.8-5sarge1Not reportedDSA-1504-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References