CVE-2006-4145
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local...
4.9 MediumFix available
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
Exploit likelihood
0.45%Down 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
CVE-2006-4145- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
CVE-2006-4145- Updated
- 2026-11-02
EUVDEUVD-2006-4135 No score
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
EUVD-2006-4135- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9jjx-pwqr-6p8g No score
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local...
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
GHSA-9jjx-pwqr-6p8g- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 |
before 2.6.8-16sarge5, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 |
2.6.8-16sarge5 |
fai-kernelsDebian:3.1 |
before 1.9.1sarge4, plus listed versions 1.9.11.9.1sarge11.9.1sarge21.9.1sarge3 |
1.9.1sarge4 |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4145 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published August 21, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in kernel-source-2.6.8 2.6.8-16sarge5.
References
secunia.com/advisories/21934
mandriva.com/security/advisories?name=MDKSA-2007:025
novell.com/linux/security/advisories/2006_79_kernel.html
Show 141 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10796
lkml.org/lkml/2006/6/16/6
redhat.com/support/errata/RHSA-2008-0665.html
vupen.com/english/advisories/2006/3308
ubuntu.com/usn/usn-346-1
issues.rpath.com/browse/RPL-611
securityfocus.com/archive/1/444887/100/0/threaded
support.avaya.com/elmodocs2/security/ASA-2008-365.htm
debian.org/security/2006/dsa-1184
nvd.nist.gov/vuln/detail/CVE-2006-4145
github.com/advisories/GHSA-9jjx-pwqr-6p8g
access.redhat.com/errata/RHSA-2008:0665
bugzilla.redhat.com/show_bug.cgi?id=278961
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0665.json
cve.org/CVERecord?id=CVE-2006-4145