2.1

CVE-2006-1056

The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version <= 2.6.16.8
LinuxLinux Kernel Version2.6.0
LinuxLinux Kernel Version2.6.0 Updatetest1
LinuxLinux Kernel Version2.6.0 Updatetest10
LinuxLinux Kernel Version2.6.0 Updatetest11
LinuxLinux Kernel Version2.6.0 Updatetest2
LinuxLinux Kernel Version2.6.0 Updatetest3
LinuxLinux Kernel Version2.6.0 Updatetest4
LinuxLinux Kernel Version2.6.0 Updatetest5
LinuxLinux Kernel Version2.6.0 Updatetest6
LinuxLinux Kernel Version2.6.0 Updatetest7
LinuxLinux Kernel Version2.6.0 Updatetest8
LinuxLinux Kernel Version2.6.0 Updatetest9
LinuxLinux Kernel Version2.6.1
LinuxLinux Kernel Version2.6.1 Updaterc1
LinuxLinux Kernel Version2.6.1 Updaterc2
LinuxLinux Kernel Version2.6.1 Updaterc3
LinuxLinux Kernel Version2.6.2
LinuxLinux Kernel Version2.6.2 Updaterc1
LinuxLinux Kernel Version2.6.2 Updaterc2
LinuxLinux Kernel Version2.6.2 Updaterc3
LinuxLinux Kernel Version2.6.3
LinuxLinux Kernel Version2.6.3 Updaterc1
LinuxLinux Kernel Version2.6.3 Updaterc2
LinuxLinux Kernel Version2.6.3 Updaterc3
LinuxLinux Kernel Version2.6.3 Updaterc4
LinuxLinux Kernel Version2.6.4
LinuxLinux Kernel Version2.6.4 Updaterc1
LinuxLinux Kernel Version2.6.4 Updaterc2
LinuxLinux Kernel Version2.6.4 Updaterc3
LinuxLinux Kernel Version2.6.5
LinuxLinux Kernel Version2.6.5 Updaterc1
LinuxLinux Kernel Version2.6.5 Updaterc2
LinuxLinux Kernel Version2.6.5 Updaterc3
LinuxLinux Kernel Version2.6.6
LinuxLinux Kernel Version2.6.6 Updaterc1
LinuxLinux Kernel Version2.6.6 Updaterc2
LinuxLinux Kernel Version2.6.6 Updaterc3
LinuxLinux Kernel Version2.6.7
LinuxLinux Kernel Version2.6.7 Updaterc1
LinuxLinux Kernel Version2.6.7 Updaterc2
LinuxLinux Kernel Version2.6.7 Updaterc3
LinuxLinux Kernel Version2.6.8
LinuxLinux Kernel Version2.6.8 Updaterc1
LinuxLinux Kernel Version2.6.8 Updaterc2
LinuxLinux Kernel Version2.6.8 Updaterc3
LinuxLinux Kernel Version2.6.8 Updaterc4
LinuxLinux Kernel Version2.6.9
LinuxLinux Kernel Version2.6.9 Update2.6.20
LinuxLinux Kernel Version2.6.9 Updaterc1
LinuxLinux Kernel Version2.6.9 Updaterc2
LinuxLinux Kernel Version2.6.9 Updaterc3
LinuxLinux Kernel Version2.6.9 Updaterc4
LinuxLinux Kernel Version2.6.10
LinuxLinux Kernel Version2.6.10 Updaterc1
LinuxLinux Kernel Version2.6.10 Updaterc2
LinuxLinux Kernel Version2.6.10 Updaterc3
LinuxLinux Kernel Version2.6.11
LinuxLinux Kernel Version2.6.11 Updaterc1
LinuxLinux Kernel Version2.6.11 Updaterc2
LinuxLinux Kernel Version2.6.11 Updaterc3
LinuxLinux Kernel Version2.6.11 Updaterc4
LinuxLinux Kernel Version2.6.11 Updaterc5
LinuxLinux Kernel Version2.6.11.1
LinuxLinux Kernel Version2.6.11.2
LinuxLinux Kernel Version2.6.11.3
LinuxLinux Kernel Version2.6.11.4
LinuxLinux Kernel Version2.6.11.5
LinuxLinux Kernel Version2.6.11.6
LinuxLinux Kernel Version2.6.11.7
LinuxLinux Kernel Version2.6.11.8
LinuxLinux Kernel Version2.6.11.9
LinuxLinux Kernel Version2.6.11.10
LinuxLinux Kernel Version2.6.11.11
LinuxLinux Kernel Version2.6.11.12
LinuxLinux Kernel Version2.6.12 Updaterc1
LinuxLinux Kernel Version2.6.12 Updaterc2
LinuxLinux Kernel Version2.6.12 Updaterc3
LinuxLinux Kernel Version2.6.12 Updaterc4
LinuxLinux Kernel Version2.6.12 Updaterc5
LinuxLinux Kernel Version2.6.12 Updaterc6
LinuxLinux Kernel Version2.6.12.1
LinuxLinux Kernel Version2.6.12.2
LinuxLinux Kernel Version2.6.12.3
LinuxLinux Kernel Version2.6.12.4
LinuxLinux Kernel Version2.6.12.5
LinuxLinux Kernel Version2.6.12.6
LinuxLinux Kernel Version2.6.13
LinuxLinux Kernel Version2.6.13 Updaterc1
LinuxLinux Kernel Version2.6.13 Updaterc2
LinuxLinux Kernel Version2.6.13 Updaterc3
LinuxLinux Kernel Version2.6.13 Updaterc4
LinuxLinux Kernel Version2.6.13 Updaterc5
LinuxLinux Kernel Version2.6.13 Updaterc6
LinuxLinux Kernel Version2.6.13 Updaterc7
LinuxLinux Kernel Version2.6.13.1
LinuxLinux Kernel Version2.6.13.2
LinuxLinux Kernel Version2.6.13.3
LinuxLinux Kernel Version2.6.13.4
LinuxLinux Kernel Version2.6.14
LinuxLinux Kernel Version2.6.14 Updaterc1
LinuxLinux Kernel Version2.6.14 Updaterc2
LinuxLinux Kernel Version2.6.14 Updaterc3
LinuxLinux Kernel Version2.6.14 Updaterc4
LinuxLinux Kernel Version2.6.14 Updaterc5
LinuxLinux Kernel Version2.6.14.1
LinuxLinux Kernel Version2.6.14.2
LinuxLinux Kernel Version2.6.14.3
LinuxLinux Kernel Version2.6.14.4
LinuxLinux Kernel Version2.6.14.5
LinuxLinux Kernel Version2.6.14.6
LinuxLinux Kernel Version2.6.14.7
LinuxLinux Kernel Version2.6.15
LinuxLinux Kernel Version2.6.15 Updaterc1
LinuxLinux Kernel Version2.6.15 Updaterc3
LinuxLinux Kernel Version2.6.15 Updaterc4
LinuxLinux Kernel Version2.6.15 Updaterc5
LinuxLinux Kernel Version2.6.15 Updaterc6
LinuxLinux Kernel Version2.6.15 Updaterc7
LinuxLinux Kernel Version2.6.15.1
LinuxLinux Kernel Version2.6.15.2
LinuxLinux Kernel Version2.6.15.3
LinuxLinux Kernel Version2.6.15.4
LinuxLinux Kernel Version2.6.15.5
LinuxLinux Kernel Version2.6.15.6
LinuxLinux Kernel Version2.6.15.7
LinuxLinux Kernel Version2.6.16
LinuxLinux Kernel Version2.6.16 Updaterc1
LinuxLinux Kernel Version2.6.16 Updaterc2
LinuxLinux Kernel Version2.6.16 Updaterc3
LinuxLinux Kernel Version2.6.16 Updaterc4
LinuxLinux Kernel Version2.6.16 Updaterc5
LinuxLinux Kernel Version2.6.16 Updaterc6
LinuxLinux Kernel Version2.6.16.1
LinuxLinux Kernel Version2.6.16.2
LinuxLinux Kernel Version2.6.16.3
LinuxLinux Kernel Version2.6.16.4
LinuxLinux Kernel Version2.6.16.5
LinuxLinux Kernel Version2.6.16.6
LinuxLinux Kernel Version2.6.16.7
LinuxLinux Kernel Version2.6.16_rc7
LinuxLinux Kernel Version2.6_test9_cvs
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.356
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/22875
Vendor Advisory
http://www.securityfocus.com/archive/1/451404/100/0/threaded
http://www.securityfocus.com/archive/1/451417/100/200/threaded
http://www.vmware.com/download/esx/esx-213-200610-patch.html
http://www.vupen.com/english/advisories/2006/4502
Vendor Advisory
http://www.securityfocus.com/archive/1/451419/100/200/threaded
http://www.vmware.com/download/esx/esx-254-200610-patch.html
http://secunia.com/advisories/21035
Vendor Advisory
http://secunia.com/advisories/21136
Vendor Advisory
http://secunia.com/advisories/21465
Vendor Advisory
http://secunia.com/advisories/21983
Vendor Advisory
http://secunia.com/advisories/22417
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm
http://www.redhat.com/support/errata/RHSA-2006-0437.html
http://www.redhat.com/support/errata/RHSA-2006-0575.html
http://www.redhat.com/support/errata/RHSA-2006-0579.html
http://secunia.com/advisories/20914
Vendor Advisory
http://www.debian.org/security/2006/dsa-1103
http://www.vupen.com/english/advisories/2006/2554
Vendor Advisory
http://secunia.com/advisories/20398
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006-05-31.html
http://secunia.com/advisories/20671
Vendor Advisory
http://www.debian.org/security/2006/dsa-1097
http://secunia.com/advisories/20716
Vendor Advisory
http://www.ubuntu.com/usn/usn-302-1
http://lwn.net/Alerts/180820/
http://secunia.com/advisories/19735
Vendor Advisory
http://www.vupen.com/english/advisories/2006/1475
Vendor Advisory
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc
http://kb.vmware.com/kb/2533126
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
http://marc.info/?l=linux-kernel&m=114548768214478&w=2
http://secunia.com/advisories/19715
Patch
Vendor Advisory
http://secunia.com/advisories/19724
Patch
Vendor Advisory
http://secunia.com/advisories/22876
Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt
http://securitytracker.com/id?1015966
http://www.osvdb.org/24746
http://www.osvdb.org/24807
http://www.securityfocus.com/archive/1/431341
http://www.securityfocus.com/archive/1/451421/100/0/threaded
http://www.securityfocus.com/bid/17600
Patch
http://www.vupen.com/english/advisories/2006/1426
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4353
Vendor Advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911
https://exchange.xforce.ibmcloud.com/vulnerabilities/25871
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995