Description
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1183-1 | New Linux 2.4.27 packages fix several vulnerabilities |
Debian DSA |
DSA-1184-1 | New Linux 2.6.8 packages fix several vulnerabilities |
Debian DSA |
DSA-1184-2 | New Linux 2.6.8 packages fix several vulnerabilities |
EUVD |
EUVD-2006-2932 | The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow. |
Ubuntu USN |
USN-331-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-346-1 | Linux kernel vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T18:06:27.219Z
Reserved: 2006-06-09T00:00:00.000Z
Link: CVE-2006-2935
No data.
Status : Modified
Published: 2006-07-05T18:05:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2006-2935
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN