CVE-2006-4145
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local...
4.9 Medium
CVE-2006-4145 is a medium vulnerability (CVSS 4.9) in Linux Kernel, published August 21, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. No source names a fixed version.
- Severity
- 4.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.45%EPSS, 39th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
Exploit likelihood
0.45%Down 1.1 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.6.8Debian:3.1 From an advisory covering 16 CVEs | before 2.6.8-16sarge5, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 | 2.6.8-16sarge5 |
fai-kernelsDebian:3.1 From an advisory covering 16 CVEs | before 1.9.1sarge4, plus listed versions 1.9.11.9.1sarge11.9.1sarge21.9.1sarge3 | 1.9.1sarge4 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.6.9-78.EL | 0:2.6.9-78.EL |
What each source reports
NVD Score used
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
CVE-2006-4145- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
CVE-2006-4145- Updated
- 2026-11-02
EUVDEUVD-2006-4135No score
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
EUVD-2006-4135- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9jjx-pwqr-6p8gNo score
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local...
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
- Record
GHSA-9jjx-pwqr-6p8g- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/21934
mandriva.com/security/advisories?name=MDKSA-2007:025
novell.com/linux/security/advisories/2006_79_kernel.html
Show 141 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10796
lkml.org/lkml/2006/6/16/6
redhat.com/support/errata/RHSA-2008-0665.html
vupen.com/english/advisories/2006/3308
ubuntu.com/usn/usn-346-1
issues.rpath.com/browse/RPL-611
securityfocus.com/archive/1/444887/100/0/threaded
support.avaya.com/elmodocs2/security/ASA-2008-365.htm
debian.org/security/2006/dsa-1184
nvd.nist.gov/vuln/detail/CVE-2006-4145
github.com/advisories/GHSA-9jjx-pwqr-6p8g
access.redhat.com/errata/RHSA-2008:0665
bugzilla.redhat.com/show_bug.cgi?id=278961
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0665.json
cve.org/CVERecord?id=CVE-2006-4145