CVE-2006-0095 
                        Detail
                     
                    
                    
                        
                            
                                
                                    Deferred This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
                                 
                             
                            Description  
                            
                            dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.
                            
                            
                            
                            
                                Metrics 
                                 
                                
                                    CVSS Version 4.0
                                     
                                    CVSS Version 3.x
                                     
                                    CVSS Version 2.0
                                     
                                
                                
                                    
                                        
                                            NVD enrichment efforts reference publicly available information to associate
                                            vector strings. CVSS information contributed by other sources is also
                                            displayed.
                                         
                                     
                                
                                
                                
                                    CVSS 4.0 Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
                                       
                                             NVD assessment
                                       not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 3.x Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
												
                                             NVD assessment
														not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 2.0 Severity and Vector Strings:   
                                    
                                    
                                        
                                        
                                        
												Vector:  
													(AV:L/AC:L/Au:N/C:P/I:N/A:N) 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                             
                            
                                
                                
                                
                                
                                    References to Advisories, Solutions, and Tools 
                                    
                                        By selecting these links, you will be leaving NIST webspace.
                                        We have provided these links to other web sites because they
                                        may have information that would be of interest to you. No
                                        inferences should be drawn on account of other sites being
                                        referenced, or not, from this page. There may be other web
                                        sites that are more appropriate for your purpose. NIST does
                                        not necessarily endorse the views expressed, or concur with
                                        the facts presented on these sites. Further, NIST does not
                                        endorse any commercial products that may be mentioned on
                                        these sites. Please address comments about this page to [email protected] 
                                    
                                        
                                        
                                            URL 
                                            Source(s) 
                                            Tag(s) 
                                         
                                         
                                        
                                        
                                            
                                            
                                                http://marc.info/?l=linux-kernel&m=113640535312572&w=2 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://marc.info/?l=linux-kernel&m=113641114812886&w=2 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://secunia.com/advisories/18487 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://secunia.com/advisories/18527 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://secunia.com/advisories/18774 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://secunia.com/advisories/19160 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://secunia.com/advisories/19374 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://secunia.com/advisories/20398 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://securityreason.com/securityalert/388 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://securitytracker.com/id?1015740 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.debian.org/security/2006/dsa-1017 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.novell.com/linux/security/advisories/2006-05-31.html 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.osvdb.org/22418 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.redhat.com/support/errata/RHSA-2006-0132.html 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.securityfocus.com/archive/1/427981/100/0/threaded 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.securityfocus.com/bid/16301 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.trustix.org/errata/2006/0004 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.vupen.com/english/advisories/2006/0235 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://exchange.xforce.ibmcloud.com/vulnerabilities/24189 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://usn.ubuntu.com/244-1/ 
                                             
                                            
                                            CVE, MITRE 
                                            
                                            
                                                
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Weakness Enumeration 
                                    
                                        
                                        
                                            CWE-ID 
                                            CWE Name 
                                            Source 
                                         
                                         
                                        
                                        
                                            
                                                
                                                NVD-CWE-Other 
                                             
                                            Other 
                                            
														
														NIST   
														 
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Change History 
                                     9 change records found show changes 
                                     
                                    
	
		
			 
			
				CVE Modified by CVE  11/20/2024 7:05:38 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://marc.info/?l=linux-kernel&m=113640535312572&w=2 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://marc.info/?l=linux-kernel&m=113641114812886&w=2 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://secunia.com/advisories/18487 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://secunia.com/advisories/18527 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://secunia.com/advisories/18774 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://secunia.com/advisories/19160 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://secunia.com/advisories/19374 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://secunia.com/advisories/20398 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://securityreason.com/securityalert/388 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://securitytracker.com/id?1015740 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.debian.org/security/2006/dsa-1017 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.novell.com/linux/security/advisories/2006-05-31.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.osvdb.org/22418 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.redhat.com/support/errata/RHSA-2006-0132.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/archive/1/427981/100/0/threaded 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/16301 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.trustix.org/errata/2006/0004 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.vupen.com/english/advisories/2006/0235 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://exchange.xforce.ibmcloud.com/vulnerabilities/24189 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://usn.ubuntu.com/244-1/ 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by MITRE  5/13/2024 9:33:58 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				CVE Modified by MITRE  10/19/2018 11:42:35 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/archive/1/427981/100/0/threaded [No Types Assigned] 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://www.securityfocus.com/archive/1/archive/1/427981/100/0/threaded [No Types Assigned] 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				CVE Modified by MITRE  10/03/2018 5:34:53 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://usn.ubuntu.com/244-1/ [No Types Assigned] 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://www.ubuntulinux.org/support/documentation/usn/usn-244-1 [No Types Assigned] 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				CVE Modified by MITRE  10/10/2017 9:30:35 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192 [No Types Assigned] 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11192 [No Types Assigned] 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				CVE Modified by MITRE  7/19/2017 9:29:28 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://exchange.xforce.ibmcloud.com/vulnerabilities/24189 [No Types Assigned] 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://xforce.iss.net/xforce/xfdb/24189 [No Types Assigned] 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				CVE Translated by NIST  10/18/2016 11:45:00 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				CVE Modified by MITRE  10/17/2016 11:38:46 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://marc.info/?l=linux-kernel&m=113640535312572&w=2 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://marc.info/?l=linux-kernel&m=113641114812886&w=2 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://marc.theaimsgroup.com/?l=linux-kernel&m=113640535312572&w=2 
								  
							
						
								
								
						 
					 
					
						Removed 
						Reference 
						
							
							
							
								http://marc.theaimsgroup.com/?l=linux-kernel&m=113641114812886&w=2 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				Initial CVE Analysis  1/06/2006 8:11:00 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		  
	 
                                 
                             
                         
                        
                            
                                Quick Info 
                                CVE Dictionary Entry:  CVE-2006-0095  NVD
                                Published Date:  01/06/2006  NVD
                                Last Modified:  04/02/2025  
                                Source:  MITRE