Home > Vulnerability Database > CVE-2006-1056

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-1056

Date: April 20, 2006

The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one process to determine portions of the state of floating point instructions of other processes, which can be leveraged to obtain sensitive information such as cryptographic keys. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels.

Severity Score

4.0

Related Resources (53)

Url: http://www.osvdb.org/24807

Url: http://www.novell.com/linux/security/advisories/2006-05-31.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-1056

Url: http://lwn.net/Alerts/180820/

Url: http://secunia.com/advisories/19735

Url: http://www.securityfocus.com/archive/1/431341

Url: http://secunia.com/advisories/21136

Url: http://www.securityfocus.com/archive/1/451404/100/0/threaded

Url: http://www.securityfocus.com/bid/17600

Url: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9

Url: http://www.vupen.com/english/advisories/2006/4353

Url: http://www.ubuntu.com/usn/usn-302-1

Url: http://secunia.com/advisories/21983

Url: http://www.redhat.com/support/errata/RHSA-2006-0579.html

Url: http://secunia.com/advisories/21465

Url: http://secunia.com/advisories/22876

Url: http://secunia.com/advisories/22875

Url: http://www.redhat.com/support/errata/RHSA-2006-0437.html

Url: http://www.vmware.com/download/esx/esx-254-200610-patch.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-1056

Url: http://kb.vmware.com/kb/2533126

Url: http://www.vupen.com/english/advisories/2006/4502

Url: http://securitytracker.com/id?1015966

Url: http://www.vupen.com/english/advisories/2006/1475

Url: http://www.securityfocus.com/archive/1/451417/100/200/threaded

Url: http://www.redhat.com/support/errata/RHSA-2006-0575.html

Url: http://secunia.com/advisories/19715

Url: http://www.osvdb.org/24746

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9995

Url: http://www.vupen.com/english/advisories/2006/1426

Url: http://www.vmware.com/download/esx/esx-213-200610-patch.html

Url: http://www.debian.org/security/2006/dsa-1097

Url: http://marc.info/?l=linux-kernel&m=114548768214478&w=2

Url: http://www.securityfocus.com/archive/1/451421/100/0/threaded

Url: http://secunia.com/advisories/21035

Url: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Url: http://www.vupen.com/english/advisories/2006/2554

Url: http://www.debian.org/security/2006/dsa-1103

Url: http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Url: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187911

Url: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:14.fpu.asc

Url: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187910

Url: http://secunia.com/advisories/20716

Url: http://secunia.com/advisories/20914

Url: http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm

Url: http://secunia.com/advisories/19724

Url: http://security.freebsd.org/advisories/FreeBSD-SA-06:14-amd.txt

Url: http://secunia.com/advisories/20398

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/25871

Url: http://secunia.com/advisories/22417

Url: http://www.securityfocus.com/archive/1/451419/100/200/threaded

Url: http://secunia.com/advisories/20671

Url: https://www.mend.io/vulnerability-database/CVE-2006-1056

Severity Score

4.0

Weakness Type (CWE)

Cryptographic Issues

CWE-310

CVSS v3.1

Base Score:	4.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	2.1
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us