{
  "threat_severity" : "Low",
  "public_date" : "2006-11-07T00:00:00Z",
  "bugzilla" : {
    "description" : "security flaw",
    "id" : "1618227",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1618227"
  },
  "details" : [ "The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs." ],
  "statement" : "The CVE-2006-5823 is about a corrupted cramfs (MOKB-07-11-2006) that can cause a memory corruption and so crash the machine.\nFor Red Hat Enterpise Linux 3 this issue is tracked via Bugzilla #216960 and for Red Hat Enterprise Linux 4 it is tracked via Bugzilla #216958.\nRed Hat Enterprise Linux 2.1 is not vulnerable to this issue.\nThis issue has been rated as having low impact, because root privileges or physical access to the machine are needed to mount a corrupted filesystem and crash the machine.\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 3",
    "release_date" : "2007-06-08T00:00:00Z",
    "advisory" : "RHSA-2007:0436",
    "cpe" : "cpe:/o:redhat:enterprise_linux:3",
    "package" : "kernel-0:2.4.21-50.EL"
  }, {
    "product_name" : "Red Hat Enterprise Linux 4",
    "release_date" : "2007-01-30T00:00:00Z",
    "advisory" : "RHSA-2007:0014",
    "cpe" : "cpe:/o:redhat:enterprise_linux:4",
    "package" : "kernel-0:2.6.9-42.0.8.EL"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2006-5823\nhttps://nvd.nist.gov/vuln/detail/CVE-2006-5823" ],
  "name" : "CVE-2006-5823",
  "csaw" : false
}