{"api_version":"1","generated_at":"2026-07-24T20:42:10+00:00","cve":"CVE-2006-2935","urls":{"html":"https://cve.report/CVE-2006-2935","api":"https://cve.report/api/cve/CVE-2006-2935.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-2935","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-2935"},"summary":{"title":"CVE-2006-2935","description":"The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.","state":"PUBLIC","assigner":"secalert@redhat.com","published_at":"2006-07-05 18:05:00","updated_at":"2020-08-28 13:06:00"},"problem_types":["CWE-120"],"metrics":[],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:151","name":"MDKSA-2006:151","refsource":"MANDRIVA","tags":["Broken Link"],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:150","name":"MDKSA-2006:150","refsource":"MANDRIVA","tags":["Broken Link"],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1183","name":"DSA-1183","refsource":"DEBIAN","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-1183-1 kernel-source-2.4.27","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22093","name":"22093","refsource":"SECUNIA","tags":["Broken Link"],"title":"Debian update for kernel-source-2.6.8 - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/444887/100/0/threaded","name":"20060831 rPSA-2006-0162-1 kernel","refsource":"BUGTRAQ","tags":["Third Party Advisory","VDB Entry"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_64_kernel.html","name":"SUSE-SA:2006:064","refsource":"SUSE","tags":["Broken Link"],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/23788","name":"23788","refsource":"SECUNIA","tags":["Broken Link"],"title":"Red Hat update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21498","name":"21498","refsource":"SECUNIA","tags":["Broken Link"],"title":"SUSE update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886","name":"oval:org.mitre.oval:def:10886","refsource":"OVAL","tags":["Third Party Advisory"],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=2966","name":"http://bugzilla.kernel.org/show_bug.cgi?id=2966","refsource":"MISC","tags":["Issue Tracking","Vendor Advisory"],"title":"2966 – possible buffer overflow in DVD handling","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/23064","name":"23064","refsource":"SECUNIA","tags":["Broken Link"],"title":"Avaya Products Linux Kernel Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_42_kernel.html","name":"SUSE-SA:2006:042","refsource":"SUSE","tags":["Broken Link"],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0013.html","name":"RHSA-2007:0013","refsource":"REDHAT","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21605","name":"21605","refsource":"SECUNIA","tags":["Broken Link"],"title":"Red Hat update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670","name":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670","refsource":"CONFIRM","tags":["Issue Tracking","Third Party Advisory"],"title":"197670 – CVE-2006-2935 Possible buffer overflow in DVD handling","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.rpath.com/browse/RPL-611","name":"https://issues.rpath.com/browse/RPL-611","refsource":"CONFIRM","tags":["Broken Link"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm","name":"http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm","refsource":"CONFIRM","tags":["Third Party Advisory"],"title":"ASA-2006-254 (RHSA-2006-0710)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21179","name":"21179","refsource":"SECUNIA","tags":["Broken Link"],"title":"SUSE update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22497","name":"22497","refsource":"SECUNIA","tags":["Broken Link"],"title":"Red Hat update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0012.html","name":"RHSA-2007:0012","refsource":"REDHAT","tags":["Broken Link"],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21614","name":"21614","refsource":"SECUNIA","tags":["Broken Link"],"title":"Mandriva update for kernel - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/24288","name":"24288","refsource":"SECUNIA","tags":["Broken Link"],"title":"Avaya Products Linux Kernel Denial of Service - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21695","name":"21695","refsource":"SECUNIA","tags":["Broken Link"],"title":"rPath update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0617.html","name":"RHSA-2006:0617","refsource":"REDHAT","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21934","name":"21934","refsource":"SECUNIA","tags":["Broken Link"],"title":"Ubuntu update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm","name":"http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm","refsource":"CONFIRM","tags":["Third Party Advisory"],"title":"ASA-2006-203 (RHSA-2006-0617)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21298","name":"21298","refsource":"SECUNIA","tags":["Broken Link"],"title":"Ubuntu update for kernel - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0710.html","name":"RHSA-2006:0710","refsource":"REDHAT","tags":["Broken Link"],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-1184","name":"DSA-1184","refsource":"DEBIAN","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-1184-2 kernel-source-2.6.8","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/18847","name":"18847","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"Linux Kernel CD-ROM Driver Local Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.ubuntu.com/usn/usn-346-1","name":"USN-346-1","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"usn/usn-346-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22822","name":"22822","refsource":"SECUNIA","tags":["Broken Link"],"title":"SUSE update for kernel - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22082","name":"22082","refsource":"SECUNIA","tags":["Broken Link"],"title":"Debian update for kernel-source-2.4.27 - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm","name":"http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm","refsource":"CONFIRM","tags":["Third Party Advisory"],"title":"ASA-2007-078 (RHSA-2007-0013)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22174","name":"22174","refsource":"SECUNIA","tags":["Broken Link"],"title":"Avaya Products Linux Kernel Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2680","name":"ADV-2006-2680","refsource":"VUPEN","tags":["Broken Link"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_47_kernel.html","name":"SUSE-SA:2006:047","refsource":"SUSE","tags":["Broken Link"],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/usn-331-1","name":"USN-331-1","refsource":"UBUNTU","tags":["Third Party Advisory"],"title":"usn/usn-331-1 - Ubuntu: Linux for human beings","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2006_49_kernel.html","name":"SUSE-SA:2006:049","refsource":"SUSE","tags":["Broken Link"],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27579","name":"linux-dvdreadbca-bo(27579)","refsource":"XF","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2935","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2935","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"5.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"6.06","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"5.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"canonical","cpe5":"ubuntu_linux","cpe6":"6.06","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"2935","vulnerable":"1","versionEndIncluding":"2.16.16","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2006-2935","ASSIGNER":"secalert@redhat.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_affected":"=","version_value":"n/a"}]}}]}}]}},"references":{"reference_data":[{"url":"http://secunia.com/advisories/21179","refsource":"MISC","name":"http://secunia.com/advisories/21179"},{"url":"http://www.novell.com/linux/security/advisories/2006_42_kernel.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_42_kernel.html"},{"url":"http://secunia.com/advisories/21498","refsource":"MISC","name":"http://secunia.com/advisories/21498"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:150","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:150"},{"url":"http://www.novell.com/linux/security/advisories/2006_47_kernel.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_47_kernel.html"},{"url":"http://secunia.com/advisories/22082","refsource":"MISC","name":"http://secunia.com/advisories/22082"},{"url":"http://secunia.com/advisories/22093","refsource":"MISC","name":"http://secunia.com/advisories/22093"},{"url":"http://www.debian.org/security/2006/dsa-1183","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1183"},{"url":"http://www.debian.org/security/2006/dsa-1184","refsource":"MISC","name":"http://www.debian.org/security/2006/dsa-1184"},{"url":"http://secunia.com/advisories/21614","refsource":"MISC","name":"http://secunia.com/advisories/21614"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:151","refsource":"MISC","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:151"},{"url":"http://secunia.com/advisories/22497","refsource":"MISC","name":"http://secunia.com/advisories/22497"},{"url":"http://secunia.com/advisories/23064","refsource":"MISC","name":"http://secunia.com/advisories/23064"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm","refsource":"MISC","name":"http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0710.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0710.html"},{"url":"http://secunia.com/advisories/21605","refsource":"MISC","name":"http://secunia.com/advisories/21605"},{"url":"http://secunia.com/advisories/22174","refsource":"MISC","name":"http://secunia.com/advisories/22174"},{"url":"http://secunia.com/advisories/22822","refsource":"MISC","name":"http://secunia.com/advisories/22822"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm","refsource":"MISC","name":"http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm"},{"url":"http://www.novell.com/linux/security/advisories/2006_64_kernel.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_64_kernel.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0617.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2006-0617.html"},{"url":"http://secunia.com/advisories/21298","refsource":"MISC","name":"http://secunia.com/advisories/21298"},{"url":"http://secunia.com/advisories/21934","refsource":"MISC","name":"http://secunia.com/advisories/21934"},{"url":"http://www.ubuntu.com/usn/usn-331-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-331-1"},{"url":"http://www.ubuntu.com/usn/usn-346-1","refsource":"MISC","name":"http://www.ubuntu.com/usn/usn-346-1"},{"url":"http://bugzilla.kernel.org/show_bug.cgi?id=2966","refsource":"MISC","name":"http://bugzilla.kernel.org/show_bug.cgi?id=2966"},{"url":"http://secunia.com/advisories/21695","refsource":"MISC","name":"http://secunia.com/advisories/21695"},{"url":"http://secunia.com/advisories/23788","refsource":"MISC","name":"http://secunia.com/advisories/23788"},{"url":"http://secunia.com/advisories/24288","refsource":"MISC","name":"http://secunia.com/advisories/24288"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm","refsource":"MISC","name":"http://support.avaya.com/elmodocs2/security/ASA-2007-078.htm"},{"url":"http://www.novell.com/linux/security/advisories/2006_49_kernel.html","refsource":"MISC","name":"http://www.novell.com/linux/security/advisories/2006_49_kernel.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0012.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2007-0012.html"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0013.html","refsource":"MISC","name":"http://www.redhat.com/support/errata/RHSA-2007-0013.html"},{"url":"http://www.securityfocus.com/archive/1/444887/100/0/threaded","refsource":"MISC","name":"http://www.securityfocus.com/archive/1/444887/100/0/threaded"},{"url":"http://www.securityfocus.com/bid/18847","refsource":"MISC","name":"http://www.securityfocus.com/bid/18847"},{"url":"http://www.vupen.com/english/advisories/2006/2680","refsource":"MISC","name":"http://www.vupen.com/english/advisories/2006/2680"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670","refsource":"MISC","name":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=197670"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27579","refsource":"MISC","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27579"},{"url":"https://issues.rpath.com/browse/RPL-611","refsource":"MISC","name":"https://issues.rpath.com/browse/RPL-611"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886","refsource":"MISC","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10886"}]}},"nvd":{"publishedDate":"2006-07-05 18:05:00","lastModifiedDate":"2020-08-28 13:06:00","problem_types":["CWE-120"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"severity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.16","versionEndIncluding":"2.16.16","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"2935","Ordinal":"18255","Title":"CVE-2006-2935","CVE":"CVE-2006-2935","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"2935","Ordinal":"1","NoteData":"The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"2935","Ordinal":"2","NoteData":"2006-07-05","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"2935","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}