« Volver al listado

CVE-2006-5680

Estado: ModificadaMedia (5)—

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freebsd — Freebsd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5680",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secteam@freebsd.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-09T00:07:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/22723",
      "source": "secteam@freebsd.org"
    },
    {
      "url": "http://secunia.com/advisories/22801",
      "source": "secteam@freebsd.org"
    },
    {
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:24.libarchive.asc",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "secteam@freebsd.org"
    },
    {
      "url": "http://securitytracker.com/id?1017199",
      "source": "secteam@freebsd.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/20961",
      "source": "secteam@freebsd.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30137",
      "source": "secteam@freebsd.org"
    },
    {
      "url": "http://secunia.com/advisories/22723",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22801",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.freebsd.org/advisories/FreeBSD-SA-06:24.libarchive.asc",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017199",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/20961",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30137",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data."
    },
    {
      "lang": "es",
      "value": "La biblioteca libarchive en FreeBSD 6-STABLE posterior a 2006-09-05 y anterior a 2006-11-08 permite a atacantes locales o remotos provocar una denegación de servicio (agotamiento de CPU) mediante un fichero mal formado que provoca al libarchive saltar a una región mas allá del final del fichero, que dispara un bucle infinito que intenta leer mas datos."
    }
  ],
  "lastModified": "2026-06-16T22:31:39.943",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:6:stable:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F135D976-52FD-477A-B3C3-9CDDB79ACCBB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secteam@freebsd.org"
}