$ cve CVE-2006-2451 JSON

CVE-2006-2451 EXPLOIT

4.6

MEDIUM · CVSS 2.0 · EPSS 4.4% (pctl 91)

Patch early

A public exploit exists.

Description

The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.

Scoring

CVSS	4.6 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS	4.39% — more likely to be exploited than 91% of all CVEs
Weakness	CWE-399
On CISA KEV	no
Public exploit	yes
Published	2006-07-07
Last modified	2026-09-23

Affected (1)

Vendor	Product
linux	linux kernel

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation	2006-07-18
exploit-db	Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (4)	2006-07-14
exploit-db	Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (3)	2006-07-13
exploit-db	Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (2)	2006-07-12
exploit-db	Linux Kernel 2.6.13 < 2.6.17.4 - 'sys_prctl()' Local Privilege Escalation (1)	2006-07-11

References

→ the Explorer · watch your stack · NVD