CVE-2006-2451

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-07 · updated 2026-09-23
Weakness: CWE-399

Description

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

Affected products

Linux kernel: 2.6.13, 2.6.13.1, 2.6.13.2, 2.6.13.3, 2.6.13.4, 2.6.13.5 (+68)

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902
http://secunia.com/advisories/20953
http://secunia.com/advisories/20960
http://secunia.com/advisories/20965
http://secunia.com/advisories/20986
http://secunia.com/advisories/20991
http://secunia.com/advisories/21179
http://secunia.com/advisories/21498
http://secunia.com/advisories/21966
http://securitytracker.com/id?1016451
http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm
http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0

Get alerted when CVE-2006-2451 or the next vulnerability affects your stack