CVE-2006-1056 : Detail

CVE-2006-1056

A02-Cryptographic Failures
0.11%V3
Local
2006-04-20
08h00 +00:00
2018-10-18
12h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-310 Category : Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.

Metrics

Metrics Score Severity CVSS Vector Source
V2 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Freebsd>>Freebsd >> Version *

Linux>>Linux_kernel >> Version To (including) 2.6.16.8

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.3

Linux>>Linux_kernel >> Version 2.6.4

Linux>>Linux_kernel >> Version 2.6.4

Linux>>Linux_kernel >> Version 2.6.4

Linux>>Linux_kernel >> Version 2.6.4

Linux>>Linux_kernel >> Version 2.6.5

Linux>>Linux_kernel >> Version 2.6.5

Linux>>Linux_kernel >> Version 2.6.5

Linux>>Linux_kernel >> Version 2.6.5

Linux>>Linux_kernel >> Version 2.6.6

Linux>>Linux_kernel >> Version 2.6.6

Linux>>Linux_kernel >> Version 2.6.6

Linux>>Linux_kernel >> Version 2.6.6

Linux>>Linux_kernel >> Version 2.6.7

Linux>>Linux_kernel >> Version 2.6.7

Linux>>Linux_kernel >> Version 2.6.7

Linux>>Linux_kernel >> Version 2.6.7

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.8

Linux>>Linux_kernel >> Version 2.6.9

Linux>>Linux_kernel >> Version 2.6.9

    Linux>>Linux_kernel >> Version 2.6.9

    Linux>>Linux_kernel >> Version 2.6.9

    Linux>>Linux_kernel >> Version 2.6.9

    Linux>>Linux_kernel >> Version 2.6.9

    Linux>>Linux_kernel >> Version 2.6.10

    Linux>>Linux_kernel >> Version 2.6.10

    Linux>>Linux_kernel >> Version 2.6.10

    Linux>>Linux_kernel >> Version 2.6.10

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11

    Linux>>Linux_kernel >> Version 2.6.11.1

    Linux>>Linux_kernel >> Version 2.6.11.2

    Linux>>Linux_kernel >> Version 2.6.11.3

    Linux>>Linux_kernel >> Version 2.6.11.4

    Linux>>Linux_kernel >> Version 2.6.11.5

    Linux>>Linux_kernel >> Version 2.6.11.6

    Linux>>Linux_kernel >> Version 2.6.11.7

    Linux>>Linux_kernel >> Version 2.6.11.8

    Linux>>Linux_kernel >> Version 2.6.11.9

    Linux>>Linux_kernel >> Version 2.6.11.10

    Linux>>Linux_kernel >> Version 2.6.11.11

    Linux>>Linux_kernel >> Version 2.6.11.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12

    Linux>>Linux_kernel >> Version 2.6.12.1

    Linux>>Linux_kernel >> Version 2.6.12.2

    Linux>>Linux_kernel >> Version 2.6.12.3

    Linux>>Linux_kernel >> Version 2.6.12.4

    Linux>>Linux_kernel >> Version 2.6.12.5

    Linux>>Linux_kernel >> Version 2.6.12.6

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13

    Linux>>Linux_kernel >> Version 2.6.13.1

    Linux>>Linux_kernel >> Version 2.6.13.2

    Linux>>Linux_kernel >> Version 2.6.13.3

    Linux>>Linux_kernel >> Version 2.6.13.4

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14

    Linux>>Linux_kernel >> Version 2.6.14.1

    Linux>>Linux_kernel >> Version 2.6.14.2

    Linux>>Linux_kernel >> Version 2.6.14.3

    Linux>>Linux_kernel >> Version 2.6.14.4

    Linux>>Linux_kernel >> Version 2.6.14.5

    Linux>>Linux_kernel >> Version 2.6.14.6

    Linux>>Linux_kernel >> Version 2.6.14.7

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15

    Linux>>Linux_kernel >> Version 2.6.15.1

    Linux>>Linux_kernel >> Version 2.6.15.2

    Linux>>Linux_kernel >> Version 2.6.15.3

    Linux>>Linux_kernel >> Version 2.6.15.4

    Linux>>Linux_kernel >> Version 2.6.15.5

    Linux>>Linux_kernel >> Version 2.6.15.6

    Linux>>Linux_kernel >> Version 2.6.15.7

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16

    Linux>>Linux_kernel >> Version 2.6.16.1

    Linux>>Linux_kernel >> Version 2.6.16.2

    Linux>>Linux_kernel >> Version 2.6.16.3

    Linux>>Linux_kernel >> Version 2.6.16.4

    Linux>>Linux_kernel >> Version 2.6.16.5

    Linux>>Linux_kernel >> Version 2.6.16.6

    Linux>>Linux_kernel >> Version 2.6.16.7

    Linux>>Linux_kernel >> Version 2.6.16_rc7

      Linux>>Linux_kernel >> Version 2.6_test9_cvs

        References

        http://www.redhat.com/support/errata/RHSA-2006-0437.html
        Tags : vendor-advisory, x_refsource_REDHAT
        http://secunia.com/advisories/22876
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://secunia.com/advisories/19735
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://www.vupen.com/english/advisories/2006/4502
        Tags : vdb-entry, x_refsource_VUPEN
        http://www.vupen.com/english/advisories/2006/2554
        Tags : vdb-entry, x_refsource_VUPEN
        http://www.redhat.com/support/errata/RHSA-2006-0579.html
        Tags : vendor-advisory, x_refsource_REDHAT
        http://secunia.com/advisories/20716
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://secunia.com/advisories/22875
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://lwn.net/Alerts/180820/
        Tags : vendor-advisory, x_refsource_FEDORA
        http://secunia.com/advisories/21136
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://www.ubuntu.com/usn/usn-302-1
        Tags : vendor-advisory, x_refsource_UBUNTU
        http://kb.vmware.com/kb/2533126
        Tags : x_refsource_CONFIRM
        http://www.osvdb.org/24746
        Tags : vdb-entry, x_refsource_OSVDB
        http://www.osvdb.org/24807
        Tags : vdb-entry, x_refsource_OSVDB
        http://secunia.com/advisories/21983
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://www.vupen.com/english/advisories/2006/4353
        Tags : vdb-entry, x_refsource_VUPEN
        http://secunia.com/advisories/21035
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://www.debian.org/security/2006/dsa-1097
        Tags : vendor-advisory, x_refsource_DEBIAN
        http://www.redhat.com/support/errata/RHSA-2006-0575.html
        Tags : vendor-advisory, x_refsource_REDHAT
        http://www.vupen.com/english/advisories/2006/1426
        Tags : vdb-entry, x_refsource_VUPEN
        http://secunia.com/advisories/19715
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://securitytracker.com/id?1015966
        Tags : vdb-entry, x_refsource_SECTRACK
        http://www.securityfocus.com/archive/1/431341
        Tags : mailing-list, x_refsource_BUGTRAQ
        http://www.securityfocus.com/bid/17600
        Tags : vdb-entry, x_refsource_BID
        http://www.debian.org/security/2006/dsa-1103
        Tags : vendor-advisory, x_refsource_DEBIAN
        http://secunia.com/advisories/21465
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://marc.info/?l=linux-kernel&m=114548768214478&w=2
        Tags : mailing-list, x_refsource_MLIST
        http://www.vupen.com/english/advisories/2006/1475
        Tags : vdb-entry, x_refsource_VUPEN
        http://secunia.com/advisories/20398
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://secunia.com/advisories/22417
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://secunia.com/advisories/19724
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://secunia.com/advisories/20671
        Tags : third-party-advisory, x_refsource_SECUNIA
        http://secunia.com/advisories/20914
        Tags : third-party-advisory, x_refsource_SECUNIA