CVE-2006-2935
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2...
4.6 MediumFix available
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
Exploit likelihood
0.57%Down 2.5 points since Feb 4, 2022
What each source reports
NVD Score used
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
- Record
CVE-2006-2935- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
- Record
CVE-2006-2935- Updated
- 2026-11-02
EUVDEUVD-2006-2932 No score
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
- Record
EUVD-2006-2932- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gchf-2fmf-p9hf No score
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2...
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
- Record
GHSA-gchf-2fmf-p9hf- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.27Debian:3.1 |
before 2.4.27-10sarge4, plus listed versions 2.4.27-102.4.27-10sarge12.4.27-10sarge22.4.27-10sarge3 |
2.4.27-10sarge4 |
fai-kernelsDebian:3.1 |
before 1.9.1sarge4, plus listed versions 1.9.11.9.1sarge11.9.1sarge21.9.1sarge3 |
1.9.1sarge4 |
systemimagerDebian:3.1 |
before 3.2.3-6sarge3, plus listed versions 3.2.3-63.2.3-6sarge13.2.3-6sarge2 |
3.2.3-6sarge3 |
kernel-source-2.6.8Debian:3.1 |
before 2.6.8-16sarge5, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge4 |
2.6.8-16sarge5 |
kernelRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
Show 106 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-largesmpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-docRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smpRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws |
before 0:2.6.9-42.0.2.EL | 0:2.6.9-42.0.2.EL |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-47.0.1.EL | 0:2.4.21-47.0.1.EL |
kernelRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-docRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-smpRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-sourceRed Hat:enterprise_linux:2.1::as |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernelRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-docRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-smpRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernel-sourceRed Hat:enterprise_linux:2.1::aw |
before 0:2.4.18-e.64 | 0:2.4.18-e.64 |
kernelRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-BOOTRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-debugRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-docRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-enterpriseRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-headersRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-smpRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-sourceRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-summitRed Hat:enterprise_linux:2.1::as |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernelRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-BOOTRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-debugRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-docRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-headersRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-smpRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-sourceRed Hat:enterprise_linux:2.1::es |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernelRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-BOOTRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-debugRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-docRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-enterpriseRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-headersRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-smpRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
kernel-sourceRed Hat:enterprise_linux:2.1::ws |
before 0:2.4.9-e.71 | 0:2.4.9-e.71 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2935 is a medium vulnerability (CVSS 4.6) in Debian Linux, published July 5, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in kernel-source-2.4.27 2.4.27-10sarge4.
References
ubuntu.com/usn/usn-331-1
secunia.com/advisories/21934
novell.com/linux/security/advisories/2006_42_kernel.html
redhat.com/support/errata/RHSA-2007-0012.html
bugzilla.kernel.org/show_bug.cgi?id=2966
Show 127 moreShow less
debian.org/security/2006/dsa-1183
mandriva.com/security/advisories?name=MDKSA-2006:150
exchange.xforce.ibmcloud.com/vulnerabilities/27579
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886
vupen.com/english/advisories/2006/2680
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670
support.avaya.com/elmodocs2/security/ASA-2007-078.htm
securityfocus.com/bid/18847
issues.rpath.com/browse/RPL-611
nvd.nist.gov/vuln/detail/CVE-2006-2935
github.com/advisories/GHSA-gchf-2fmf-p9hf
access.redhat.com/errata/RHSA-2006:0617
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0617.json
cve.org/CVERecord?id=CVE-2004-2660