CVE-2006-1368 PUBLISHED CVSS 10 CRITICAL

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure.

EPSS 3.10% · 86.7th percentile

Risk Scores

CVSS v2.0
10
EPSS Score
3.10%
86.7th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel0
n/an/an/a

Timeline

References

Open in Interactive Console →