Vulnerability-Lookup

BDU:2015-02302 (CVE-2004-1017)

Vulnerability from fstec – Published: 2016-07-07 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Множественные уязвимости пакета kernel-image-2.4-powerpc-smp операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

10.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:C/I:C/A:C

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2004-1017, CVE-2005-0124, CVE-2005-0449, CVE-2005-2457, CVE-2005-2490, CVE-2005-2555, CVE-2005-2709, CVE-2005-2800, CVE-2005-2973, CVE-2005-3044, CVE-2005-3053, CVE-2005-3055, CVE-2005-3180, CVE-2005-3181, CVE-2005-3257, CVE-2005-3356, CVE-2005-3358, CVE-2005-3783, CVE-2005-3784, CVE-2005-3806, CVE-2005-3847, CVE-2005-3848, CVE-2005-3857, CVE-2005-3858, CVE-2005-4605, CVE-2005-4618, CVE-2006-0095, CVE-2006-0096, CVE-2006-0482, CVE-2006-1066, DSA-1017, ID:1400634

References

31 references

URL
http://www.debian.org/security/dsa-1017/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0095
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0096
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1066
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0124
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3180
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2457
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0482
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3847
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3356
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3784
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4605
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4618
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3783
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3181
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3358
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3055
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2490
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2800
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3044
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1017
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3053

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 3.1 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 3.1: ppc: kernel-headers - 102sarge1 kernel-headers-2.4 - 102sarge1 kernel-headers-2.6 - 102sarge1 kernel-image-2.4-powerpc - 102sarge1 kernel-image-2.4-powerpc-smp - 102sarge1 kernel-image-2.6-power3 - 102sarge1 kernel-image-2.6-power3-smp - 102sarge1 kernel-image-2.6-power4 - 102sarge1 kernel-image-2.6-power4-smp - 102sarge1 kernel-image-2.6-powerpc - 102sarge1 kernel-image-2.6-powerpc-smp - 102sarge1 kernel-image-power3 - 102sarge1 kernel-image-power3-smp - 102sarge1 kernel-image-power4 - 102sarge1 kernel-image-power4-smp - 102sarge1 kernel-image-powerpc - 102sarge1 kernel-image-powerpc-smp - 102sarge1 kernel-build-2.6.8-3-power3 - 2.6.8-12sarge2 kernel-build-2.6.8-3-power3-smp - 2.6.8-12sarge2 kernel-build-2.6.8-3-power4 - 2.6.8-12sarge2 kernel-build-2.6.8-3-power4-smp - 2.6.8-12sarge2 kernel-build-2.6.8-3-powerpc - 2.6.8-12sarge2 kernel-build-2.6.8-3-powerpc-smp - 2.6.8-12sarge2 kernel-build-2.6.8-power3 - 2.6.8-12sarge1 kernel-build-2.6.8-power3-smp - 2.6.8-12sarge1 kernel-build-2.6.8-power4 - 2.6.8-12sarge1 kernel-build-2.6.8-power4-smp - 2.6.8-12sarge1 kernel-build-2.6.8-powerpc - 2.6.8-12sarge1 kernel-build-2.6.8-powerpc-smp - 2.6.8-12sarge1 kernel-headers-2.6.8 - 2.6.8-12sarge1 kernel-headers-2.6.8-3 - 2.6.8-12sarge2 kernel-image-2.6.8-3-power3 - 2.6.8-12sarge2 kernel-image-2.6.8-3-power3-smp - 2.6.8-12sarge2 kernel-image-2.6.8-3-power4 - 2.6.8-12sarge2 kernel-image-2.6.8-3-power4-smp - 2.6.8-12sarge2 kernel-image-2.6.8-3-powerpc - 2.6.8-12sarge2 kernel-image-2.6.8-3-powerpc-smp - 2.6.8-12sarge2 kernel-image-2.6.8-power3 - 2.6.8-12sarge1 kernel-image-2.6.8-power3-smp - 2.6.8-12sarge1 kernel-image-2.6.8-power4 - 2.6.8-12sarge1 kernel-image-2.6.8-power4-smp - 2.6.8-12sarge1 kernel-image-2.6.8-powerpc - 2.6.8-12sarge1 kernel-image-2.6.8-powerpc-smp - 2.6.8-12sarge1 mol-modules-2.6.8-3-powerpc - 0.9.70+2.6.8+12sarge1 mol-modules-2.6.8-3-powerpc-smp - 0.9.70+2.6.8+12sarge1 s390x: kernel-headers-2.6.8-2 - 2.6.8-5sarge1 kernel-headers-2.6.8-3 - 2.6.8-5sarge2 kernel-image-2.6.8-2-s390 - 2.6.8-5sarge1 kernel-image-2.6.8-2-s390-tape - 2.6.8-5sarge1 kernel-image-2.6.8-2-s390x - 2.6.8-5sarge1 kernel-image-2.6.8-3-s390 - 2.6.8-5sarge2 kernel-image-2.6.8-3-s390-tape - 2.6.8-5sarge2 kernel-image-2.6.8-3-s390x - 2.6.8-5sarge2 m68k: kernel-image-2.6.8-amiga - 2.6.8-4sarge2 kernel-image-2.6.8-atari - 2.6.8-4sarge2 kernel-image-2.6.8-bvme6000 - 2.6.8-4sarge2 kernel-image-2.6.8-hp - 2.6.8-4sarge2 kernel-image-2.6.8-mac - 2.6.8-4sarge2 kernel-image-2.6.8-mvme147 - 2.6.8-4sarge2 kernel-image-2.6.8-mvme16x - 2.6.8-4sarge2 kernel-image-2.6.8-q40 - 2.6.8-4sarge2 kernel-image-2.6.8-sun3 - 2.6.8-4sarge2 i686: kernel-headers-2.6-amd64-generic - 103sarge1 kernel-headers-2.6-amd64-k8 - 103sarge1 kernel-headers-2.6-amd64-k8-smp - 103sarge1 kernel-headers-2.6-em64t-p4 - 103sarge1 kernel-headers-2.6-em64t-p4-smp - 103sarge1 kernel-image-2.6-amd64-generic - 103sarge1 kernel-image-2.6-amd64-k8 - 103sarge1 kernel-image-2.6-amd64-k8-smp - 103sarge1 kernel-image-2.6-em64t-p4 - 103sarge1 kernel-image-2.6-em64t-p4-smp - 103sarge1 kernel-headers-2.6-386 - 101sarge1 kernel-headers-2.6-686 - 101sarge1 kernel-headers-2.6-686-smp - 101sarge1 kernel-headers-2.6-k7 - 101sarge1 kernel-headers-2.6-k7-smp - 101sarge1 kernel-image-2.6-386 - 101sarge1 kernel-image-2.6-686 - 101sarge1 kernel-image-2.6-686-smp - 101sarge1 kernel-image-2.6-k7 - 101sarge1 kernel-image-2.6-k7-smp - 101sarge1 fai-kernels - 1.9.1sarge1 kernel-headers-2.6.8-2 - 2.6.8-16sarge1 kernel-headers-2.6.8-2-386 - 2.6.8-16sarge1 kernel-headers-2.6.8-2-686 - 2.6.8-16sarge1 kernel-headers-2.6.8-2-686-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-2-k7 - 2.6.8-16sarge1 kernel-headers-2.6.8-2-k7-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-3 - 2.6.8-16sarge2 kernel-headers-2.6.8-3-386 - 2.6.8-16sarge2 kernel-headers-2.6.8-3-686 - 2.6.8-16sarge2 kernel-headers-2.6.8-3-686-smp - 2.6.8-16sarge2 kernel-headers-2.6.8-3-k7 - 2.6.8-16sarge2 kernel-headers-2.6.8-3-k7-smp - 2.6.8-16sarge2 kernel-image-2.6.8-2-386 - 2.6.8-16sarge1 kernel-image-2.6.8-2-686 - 2.6.8-16sarge1 kernel-image-2.6.8-2-686-smp - 2.6.8-16sarge1 kernel-image-2.6.8-2-k7 - 2.6.8-16sarge1 kernel-image-2.6.8-2-k7-smp - 2.6.8-16sarge1 kernel-image-2.6.8-3-386 - 2.6.8-16sarge2 kernel-image-2.6.8-3-686 - 2.6.8-16sarge2 kernel-image-2.6.8-3-686-smp - 2.6.8-16sarge2 kernel-image-2.6.8-3-k7 - 2.6.8-16sarge2 kernel-image-2.6.8-3-k7-smp - 2.6.8-16sarge2 kernel-headers-2.6.8-11 - 2.6.8-16sarge1 kernel-headers-2.6.8-11-amd64-generic - 2.6.8-16sarge1 kernel-headers-2.6.8-11-amd64-k8 - 2.6.8-16sarge1 kernel-headers-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-11-em64t-p4 - 2.6.8-16sarge1 kernel-headers-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-12 - 2.6.8-16sarge2 kernel-headers-2.6.8-12-amd64-generic - 2.6.8-16sarge2 kernel-headers-2.6.8-12-amd64-k8 - 2.6.8-16sarge2 kernel-headers-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2 kernel-headers-2.6.8-12-em64t-p4 - 2.6.8-16sarge2 kernel-headers-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2 kernel-image-2.6.8-11-amd64-generic - 2.6.8-16sarge1 kernel-image-2.6.8-11-amd64-k8 - 2.6.8-16sarge1 kernel-image-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1 kernel-image-2.6.8-11-em64t-p4 - 2.6.8-16sarge1 kernel-image-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1 kernel-image-2.6.8-12-amd64-generic - 2.6.8-16sarge2 kernel-image-2.6.8-12-amd64-k8 - 2.6.8-16sarge2 kernel-image-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2 kernel-image-2.6.8-12-em64t-p4 - 2.6.8-16sarge2 kernel-image-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2 hostap-modules-2.4.27-3-386 - 0.3.7-1sarge1 hostap-modules-2.4.27-3-586tsc - 0.3.7-1sarge1 hostap-modules-2.4.27-3-686 - 0.3.7-1sarge1 hostap-modules-2.4.27-3-686-smp - 0.3.7-1sarge1 hostap-modules-2.4.27-3-k6 - 0.3.7-1sarge1 hostap-modules-2.4.27-3-k7 - 0.3.7-1sarge1 hostap-modules-2.4.27-3-k7-smp - 0.3.7-1sarge1 hostap-modules-2.6.8-3-386 - 0.3.7-1sarge1 hostap-modules-2.6.8-3-686 - 0.3.7-1sarge1 hostap-modules-2.6.8-3-686-smp - 0.3.7-1sarge1 hostap-modules-2.6.8-3-k7 - 0.3.7-1sarge1 hostap-modules-2.6.8-3-k7-smp - 0.3.7-1sarge1 ndiswrapper-modules-2.6.8-3-386 - 1.1-2sarge1 ndiswrapper-modules-2.6.8-3-686 - 1.1-2sarge1 ndiswrapper-modules-2.6.8-3-686-smp - 1.1-2sarge1 ndiswrapper-modules-2.6.8-3-k7 - 1.1-2sarge1 ndiswrapper-modules-2.6.8-3-k7-smp - 1.1-2sarge1 sparc: kernel-headers-2.6-sparc32 - 101sarge1 kernel-headers-2.6-sparc64 - 101sarge1 kernel-headers-2.6-sparc64-smp - 101sarge1 kernel-image-2.6-sparc32 - 101sarge1 kernel-image-2.6-sparc64 - 101sarge1 kernel-image-2.6-sparc64-smp - 101sarge1 kernel-build-2.6.8-2 - 2.6.8-15sarge1 kernel-build-2.6.8-3 - 2.6.8-15sarge2 kernel-headers-2.6.8-2 - 2.6.8-15sarge1 kernel-headers-2.6.8-2-sparc32 - 2.6.8-15sarge1 kernel-headers-2.6.8-2-sparc64 - 2.6.8-15sarge1 kernel-headers-2.6.8-2-sparc64-smp - 2.6.8-15sarge1 kernel-headers-2.6.8-3 - 2.6.8-15sarge2 kernel-headers-2.6.8-3-sparc32 - 2.6.8-15sarge2 kernel-headers-2.6.8-3-sparc64 - 2.6.8-15sarge2 kernel-headers-2.6.8-3-sparc64-smp - 2.6.8-15sarge2 kernel-image-2.6.8-2-sparc32 - 2.6.8-15sarge1 kernel-image-2.6.8-2-sparc64 - 2.6.8-15sarge1 kernel-image-2.6.8-2-sparc64-smp - 2.6.8-15sarge1 kernel-image-2.6.8-3-sparc32 - 2.6.8-15sarge2 kernel-image-2.6.8-3-sparc64 - 2.6.8-15sarge2 kernel-image-2.6.8-3-sparc64-smp - 2.6.8-15sarge2 x86-64: kernel-headers-2.6-amd64-generic - 103sarge1 kernel-headers-2.6-amd64-k8 - 103sarge1 kernel-headers-2.6-amd64-k8-smp - 103sarge1 kernel-headers-2.6-em64t-p4 - 103sarge1 kernel-headers-2.6-em64t-p4-smp - 103sarge1 kernel-image-2.6-amd64-generic - 103sarge1 kernel-image-2.6-amd64-k8 - 103sarge1 kernel-image-2.6-amd64-k8-smp - 103sarge1 kernel-image-2.6-em64t-p4 - 103sarge1 kernel-image-2.6-em64t-p4-smp - 103sarge1 kernel-headers-2.6.8-11 - 2.6.8-16sarge1 kernel-headers-2.6.8-11-amd64-generic - 2.6.8-16sarge1 kernel-headers-2.6.8-11-amd64-k8 - 2.6.8-16sarge1 kernel-headers-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-11-em64t-p4 - 2.6.8-16sarge1 kernel-headers-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-12 - 2.6.8-16sarge2 kernel-headers-2.6.8-12-amd64-generic - 2.6.8-16sarge2 kernel-headers-2.6.8-12-amd64-k8 - 2.6.8-16sarge2 kernel-headers-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2 kernel-headers-2.6.8-12-em64t-p4 - 2.6.8-16sarge2 kernel-headers-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2 kernel-image-2.6.8-11-amd64-generic - 2.6.8-16sarge1 kernel-image-2.6.8-11-amd64-k8 - 2.6.8-16sarge1 kernel-image-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1 kernel-image-2.6.8-11-em64t-p4 - 2.6.8-16sarge1 kernel-image-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1 kernel-image-2.6.8-12-amd64-generic - 2.6.8-16sarge2 kernel-image-2.6.8-12-amd64-k8 - 2.6.8-16sarge2 kernel-image-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2 kernel-image-2.6.8-12-em64t-p4 - 2.6.8-16sarge2 kernel-image-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2 ia64: kernel-headers-2.6-itanium - 2.6.8-14sarge2 kernel-headers-2.6-itanium-smp - 2.6.8-14sarge2 kernel-headers-2.6-mckinley - 2.6.8-14sarge2 kernel-headers-2.6-mckinley-smp - 2.6.8-14sarge2 kernel-headers-2.6.8-2 - 2.6.8-14sarge1 kernel-headers-2.6.8-2-itanium - 2.6.8-14sarge1 kernel-headers-2.6.8-2-itanium-smp - 2.6.8-14sarge1 kernel-headers-2.6.8-2-mckinley - 2.6.8-14sarge1 kernel-headers-2.6.8-2-mckinley-smp - 2.6.8-14sarge1 kernel-headers-2.6.8-3 - 2.6.8-14sarge2 kernel-headers-2.6.8-3-itanium - 2.6.8-14sarge2 kernel-headers-2.6.8-3-itanium-smp - 2.6.8-14sarge2 kernel-headers-2.6.8-3-mckinley - 2.6.8-14sarge2 kernel-headers-2.6.8-3-mckinley-smp - 2.6.8-14sarge2 kernel-image-2.6-itanium - 2.6.8-14sarge2 kernel-image-2.6-itanium-smp - 2.6.8-14sarge2 kernel-image-2.6-mckinley - 2.6.8-14sarge2 kernel-image-2.6-mckinley-smp - 2.6.8-14sarge2 kernel-image-2.6.8-2-itanium - 2.6.8-14sarge1 kernel-image-2.6.8-2-itanium-smp - 2.6.8-14sarge1 kernel-image-2.6.8-2-mckinley - 2.6.8-14sarge1 kernel-image-2.6.8-2-mckinley-smp - 2.6.8-14sarge1 kernel-image-2.6.8-3-itanium - 2.6.8-14sarge2 kernel-image-2.6.8-3-itanium-smp - 2.6.8-14sarge2 kernel-image-2.6.8-3-mckinley - 2.6.8-14sarge2 kernel-image-2.6.8-3-mckinley-smp - 2.6.8-14sarge2 alpha: kernel-headers-2.6-generic - 101sarge1 kernel-headers-2.6-smp - 101sarge1 kernel-image-2.6-generic - 101sarge1 kernel-image-2.6-smp - 101sarge1 kernel-headers-2.6.8-2 - 2.6.8-16sarge1 kernel-headers-2.6.8-2-generic - 2.6.8-16sarge1 kernel-headers-2.6.8-2-smp - 2.6.8-16sarge1 kernel-headers-2.6.8-3 - 2.6.8-16sarge2 kernel-headers-2.6.8-3-generic - 2.6.8-16sarge2 kernel-headers-2.6.8-3-smp - 2.6.8-16sarge2 kernel-image-2.6.8-2-generic - 2.6.8-16sarge1 kernel-image-2.6.8-2-smp - 2.6.8-16sarge1 kernel-image-2.6.8-3-generic - 2.6.8-16sarge2 kernel-image-2.6.8-3-smp - 2.6.8-16sarge2 noarch: kernel-doc-2.6.8 - 2.6.8-16sarge2 kernel-patch-debian-2.6.8 - 2.6.8-16sarge2 kernel-source-2.6.8 - 2.6.8-16sarge2 kernel-tree-2.6.8 - 2.6.8-16sarg

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 3.1 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 3.1:\n\tppc:\n\t\tkernel-headers - 102sarge1\n\t\tkernel-headers-2.4 - 102sarge1\n\t\tkernel-headers-2.6 - 102sarge1\n\t\tkernel-image-2.4-powerpc - 102sarge1\n\t\tkernel-image-2.4-powerpc-smp - 102sarge1\n\t\tkernel-image-2.6-power3 - 102sarge1\n\t\tkernel-image-2.6-power3-smp - 102sarge1\n\t\tkernel-image-2.6-power4 - 102sarge1\n\t\tkernel-image-2.6-power4-smp - 102sarge1\n\t\tkernel-image-2.6-powerpc - 102sarge1\n\t\tkernel-image-2.6-powerpc-smp - 102sarge1\n\t\tkernel-image-power3 - 102sarge1\n\t\tkernel-image-power3-smp - 102sarge1\n\t\tkernel-image-power4 - 102sarge1\n\t\tkernel-image-power4-smp - 102sarge1\n\t\tkernel-image-powerpc - 102sarge1\n\t\tkernel-image-powerpc-smp - 102sarge1\n\t\tkernel-build-2.6.8-3-power3 - 2.6.8-12sarge2\n\t\tkernel-build-2.6.8-3-power3-smp - 2.6.8-12sarge2\n\t\tkernel-build-2.6.8-3-power4 - 2.6.8-12sarge2\n\t\tkernel-build-2.6.8-3-power4-smp - 2.6.8-12sarge2\n\t\tkernel-build-2.6.8-3-powerpc - 2.6.8-12sarge2\n\t\tkernel-build-2.6.8-3-powerpc-smp - 2.6.8-12sarge2\n\t\tkernel-build-2.6.8-power3 - 2.6.8-12sarge1\n\t\tkernel-build-2.6.8-power3-smp - 2.6.8-12sarge1\n\t\tkernel-build-2.6.8-power4 - 2.6.8-12sarge1\n\t\tkernel-build-2.6.8-power4-smp - 2.6.8-12sarge1\n\t\tkernel-build-2.6.8-powerpc - 2.6.8-12sarge1\n\t\tkernel-build-2.6.8-powerpc-smp - 2.6.8-12sarge1\n\t\tkernel-headers-2.6.8 - 2.6.8-12sarge1\n\t\tkernel-headers-2.6.8-3 - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-3-power3 - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-3-power3-smp - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-3-power4 - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-3-power4-smp - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-3-powerpc - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-3-powerpc-smp - 2.6.8-12sarge2\n\t\tkernel-image-2.6.8-power3 - 2.6.8-12sarge1\n\t\tkernel-image-2.6.8-power3-smp - 2.6.8-12sarge1\n\t\tkernel-image-2.6.8-power4 - 2.6.8-12sarge1\n\t\tkernel-image-2.6.8-power4-smp - 2.6.8-12sarge1\n\t\tkernel-image-2.6.8-powerpc - 2.6.8-12sarge1\n\t\tkernel-image-2.6.8-powerpc-smp - 2.6.8-12sarge1\n\t\tmol-modules-2.6.8-3-powerpc - 0.9.70+2.6.8+12sarge1\n\t\tmol-modules-2.6.8-3-powerpc-smp - 0.9.70+2.6.8+12sarge1\n\ts390x:\n\t\tkernel-headers-2.6.8-2 - 2.6.8-5sarge1\n\t\tkernel-headers-2.6.8-3 - 2.6.8-5sarge2\n\t\tkernel-image-2.6.8-2-s390 - 2.6.8-5sarge1\n\t\tkernel-image-2.6.8-2-s390-tape - 2.6.8-5sarge1\n\t\tkernel-image-2.6.8-2-s390x - 2.6.8-5sarge1\n\t\tkernel-image-2.6.8-3-s390 - 2.6.8-5sarge2\n\t\tkernel-image-2.6.8-3-s390-tape - 2.6.8-5sarge2\n\t\tkernel-image-2.6.8-3-s390x - 2.6.8-5sarge2\n\tm68k:\n\t\tkernel-image-2.6.8-amiga - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-atari - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-bvme6000 - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-hp - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-mac - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-mvme147 - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-mvme16x - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-q40 - 2.6.8-4sarge2\n\t\tkernel-image-2.6.8-sun3 - 2.6.8-4sarge2\n\ti686:\n\t\tkernel-headers-2.6-amd64-generic - 103sarge1\n\t\tkernel-headers-2.6-amd64-k8 - 103sarge1\n\t\tkernel-headers-2.6-amd64-k8-smp - 103sarge1\n\t\tkernel-headers-2.6-em64t-p4 - 103sarge1\n\t\tkernel-headers-2.6-em64t-p4-smp - 103sarge1\n\t\tkernel-image-2.6-amd64-generic - 103sarge1\n\t\tkernel-image-2.6-amd64-k8 - 103sarge1\n\t\tkernel-image-2.6-amd64-k8-smp - 103sarge1\n\t\tkernel-image-2.6-em64t-p4 - 103sarge1\n\t\tkernel-image-2.6-em64t-p4-smp - 103sarge1\n\t\tkernel-headers-2.6-386 - 101sarge1\n\t\tkernel-headers-2.6-686 - 101sarge1\n\t\tkernel-headers-2.6-686-smp - 101sarge1\n\t\tkernel-headers-2.6-k7 - 101sarge1\n\t\tkernel-headers-2.6-k7-smp - 101sarge1\n\t\tkernel-image-2.6-386 - 101sarge1\n\t\tkernel-image-2.6-686 - 101sarge1\n\t\tkernel-image-2.6-686-smp - 101sarge1\n\t\tkernel-image-2.6-k7 - 101sarge1\n\t\tkernel-image-2.6-k7-smp - 101sarge1\n\t\tfai-kernels - 1.9.1sarge1\n\t\tkernel-headers-2.6.8-2 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-386 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-686 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-686-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-k7 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-k7-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-3 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-386 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-686 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-686-smp - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-k7 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-k7-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-2-386 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-2-686 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-2-686-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-2-k7 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-2-k7-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-3-386 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-3-686 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-3-686-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-3-k7 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-3-k7-smp - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-11 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-amd64-generic - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-amd64-k8 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-em64t-p4 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-12 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-amd64-generic - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-amd64-k8 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-em64t-p4 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-11-amd64-generic - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-amd64-k8 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-em64t-p4 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-12-amd64-generic - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-amd64-k8 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-em64t-p4 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2\n\t\thostap-modules-2.4.27-3-386 - 0.3.7-1sarge1\n\t\thostap-modules-2.4.27-3-586tsc - 0.3.7-1sarge1\n\t\thostap-modules-2.4.27-3-686 - 0.3.7-1sarge1\n\t\thostap-modules-2.4.27-3-686-smp - 0.3.7-1sarge1\n\t\thostap-modules-2.4.27-3-k6 - 0.3.7-1sarge1\n\t\thostap-modules-2.4.27-3-k7 - 0.3.7-1sarge1\n\t\thostap-modules-2.4.27-3-k7-smp - 0.3.7-1sarge1\n\t\thostap-modules-2.6.8-3-386 - 0.3.7-1sarge1\n\t\thostap-modules-2.6.8-3-686 - 0.3.7-1sarge1\n\t\thostap-modules-2.6.8-3-686-smp - 0.3.7-1sarge1\n\t\thostap-modules-2.6.8-3-k7 - 0.3.7-1sarge1\n\t\thostap-modules-2.6.8-3-k7-smp - 0.3.7-1sarge1\n\t\tndiswrapper-modules-2.6.8-3-386 - 1.1-2sarge1\n\t\tndiswrapper-modules-2.6.8-3-686 - 1.1-2sarge1\n\t\tndiswrapper-modules-2.6.8-3-686-smp - 1.1-2sarge1\n\t\tndiswrapper-modules-2.6.8-3-k7 - 1.1-2sarge1\n\t\tndiswrapper-modules-2.6.8-3-k7-smp - 1.1-2sarge1\n\tsparc:\n\t\tkernel-headers-2.6-sparc32 - 101sarge1\n\t\tkernel-headers-2.6-sparc64 - 101sarge1\n\t\tkernel-headers-2.6-sparc64-smp - 101sarge1\n\t\tkernel-image-2.6-sparc32 - 101sarge1\n\t\tkernel-image-2.6-sparc64 - 101sarge1\n\t\tkernel-image-2.6-sparc64-smp - 101sarge1\n\t\tkernel-build-2.6.8-2 - 2.6.8-15sarge1\n\t\tkernel-build-2.6.8-3 - 2.6.8-15sarge2\n\t\tkernel-headers-2.6.8-2 - 2.6.8-15sarge1\n\t\tkernel-headers-2.6.8-2-sparc32 - 2.6.8-15sarge1\n\t\tkernel-headers-2.6.8-2-sparc64 - 2.6.8-15sarge1\n\t\tkernel-headers-2.6.8-2-sparc64-smp - 2.6.8-15sarge1\n\t\tkernel-headers-2.6.8-3 - 2.6.8-15sarge2\n\t\tkernel-headers-2.6.8-3-sparc32 - 2.6.8-15sarge2\n\t\tkernel-headers-2.6.8-3-sparc64 - 2.6.8-15sarge2\n\t\tkernel-headers-2.6.8-3-sparc64-smp - 2.6.8-15sarge2\n\t\tkernel-image-2.6.8-2-sparc32 - 2.6.8-15sarge1\n\t\tkernel-image-2.6.8-2-sparc64 - 2.6.8-15sarge1\n\t\tkernel-image-2.6.8-2-sparc64-smp - 2.6.8-15sarge1\n\t\tkernel-image-2.6.8-3-sparc32 - 2.6.8-15sarge2\n\t\tkernel-image-2.6.8-3-sparc64 - 2.6.8-15sarge2\n\t\tkernel-image-2.6.8-3-sparc64-smp - 2.6.8-15sarge2\n\tx86-64:\n\t\tkernel-headers-2.6-amd64-generic - 103sarge1\n\t\tkernel-headers-2.6-amd64-k8 - 103sarge1\n\t\tkernel-headers-2.6-amd64-k8-smp - 103sarge1\n\t\tkernel-headers-2.6-em64t-p4 - 103sarge1\n\t\tkernel-headers-2.6-em64t-p4-smp - 103sarge1\n\t\tkernel-image-2.6-amd64-generic - 103sarge1\n\t\tkernel-image-2.6-amd64-k8 - 103sarge1\n\t\tkernel-image-2.6-amd64-k8-smp - 103sarge1\n\t\tkernel-image-2.6-em64t-p4 - 103sarge1\n\t\tkernel-image-2.6-em64t-p4-smp - 103sarge1\n\t\tkernel-headers-2.6.8-11 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-amd64-generic - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-amd64-k8 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-em64t-p4 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-12 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-amd64-generic - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-amd64-k8 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-em64t-p4 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-11-amd64-generic - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-amd64-k8 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-amd64-k8-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-em64t-p4 - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-11-em64t-p4-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-12-amd64-generic - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-amd64-k8 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-amd64-k8-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-em64t-p4 - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-12-em64t-p4-smp - 2.6.8-16sarge2\n\tia64:\n\t\tkernel-headers-2.6-itanium - 2.6.8-14sarge2\n\t\tkernel-headers-2.6-itanium-smp - 2.6.8-14sarge2\n\t\tkernel-headers-2.6-mckinley - 2.6.8-14sarge2\n\t\tkernel-headers-2.6-mckinley-smp - 2.6.8-14sarge2\n\t\tkernel-headers-2.6.8-2 - 2.6.8-14sarge1\n\t\tkernel-headers-2.6.8-2-itanium - 2.6.8-14sarge1\n\t\tkernel-headers-2.6.8-2-itanium-smp - 2.6.8-14sarge1\n\t\tkernel-headers-2.6.8-2-mckinley - 2.6.8-14sarge1\n\t\tkernel-headers-2.6.8-2-mckinley-smp - 2.6.8-14sarge1\n\t\tkernel-headers-2.6.8-3 - 2.6.8-14sarge2\n\t\tkernel-headers-2.6.8-3-itanium - 2.6.8-14sarge2\n\t\tkernel-headers-2.6.8-3-itanium-smp - 2.6.8-14sarge2\n\t\tkernel-headers-2.6.8-3-mckinley - 2.6.8-14sarge2\n\t\tkernel-headers-2.6.8-3-mckinley-smp - 2.6.8-14sarge2\n\t\tkernel-image-2.6-itanium - 2.6.8-14sarge2\n\t\tkernel-image-2.6-itanium-smp - 2.6.8-14sarge2\n\t\tkernel-image-2.6-mckinley - 2.6.8-14sarge2\n\t\tkernel-image-2.6-mckinley-smp - 2.6.8-14sarge2\n\t\tkernel-image-2.6.8-2-itanium - 2.6.8-14sarge1\n\t\tkernel-image-2.6.8-2-itanium-smp - 2.6.8-14sarge1\n\t\tkernel-image-2.6.8-2-mckinley - 2.6.8-14sarge1\n\t\tkernel-image-2.6.8-2-mckinley-smp - 2.6.8-14sarge1\n\t\tkernel-image-2.6.8-3-itanium - 2.6.8-14sarge2\n\t\tkernel-image-2.6.8-3-itanium-smp - 2.6.8-14sarge2\n\t\tkernel-image-2.6.8-3-mckinley - 2.6.8-14sarge2\n\t\tkernel-image-2.6.8-3-mckinley-smp - 2.6.8-14sarge2\n\talpha:\n\t\tkernel-headers-2.6-generic - 101sarge1\n\t\tkernel-headers-2.6-smp - 101sarge1\n\t\tkernel-image-2.6-generic - 101sarge1\n\t\tkernel-image-2.6-smp - 101sarge1\n\t\tkernel-headers-2.6.8-2 - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-generic - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-2-smp - 2.6.8-16sarge1\n\t\tkernel-headers-2.6.8-3 - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-generic - 2.6.8-16sarge2\n\t\tkernel-headers-2.6.8-3-smp - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-2-generic - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-2-smp - 2.6.8-16sarge1\n\t\tkernel-image-2.6.8-3-generic - 2.6.8-16sarge2\n\t\tkernel-image-2.6.8-3-smp - 2.6.8-16sarge2\n\tnoarch:\n\t\tkernel-doc-2.6.8 - 2.6.8-16sarge2\n\t\tkernel-patch-debian-2.6.8 - 2.6.8-16sarge2\n\t\tkernel-source-2.6.8 - 2.6.8-16sarge2\n\t\tkernel-tree-2.6.8 - 2.6.8-16sarg",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "07.07.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-02302",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2004-1017, CVE-2005-0124, CVE-2005-0449, CVE-2005-2457, CVE-2005-2490, CVE-2005-2555, CVE-2005-2709, CVE-2005-2800, CVE-2005-2973, CVE-2005-3044, CVE-2005-3053, CVE-2005-3055, CVE-2005-3180, CVE-2005-3181, CVE-2005-3257, CVE-2005-3356, CVE-2005-3358, CVE-2005-3783, CVE-2005-3784, CVE-2005-3806, CVE-2005-3847, CVE-2005-3848, CVE-2005-3857, CVE-2005-3858, CVE-2005-4605, CVE-2005-4618, CVE-2006-0095, CVE-2006-0096, CVE-2006-0482, CVE-2006-1066, DSA-1017, ID:1400634",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 kernel-image-2.4-powerpc-smp \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1017/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0095\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0096\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1066\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0124\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3180\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2457\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0482\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3847\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3356\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3784\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4605\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4618\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3783\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3181\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3358\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3055\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2490\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2800\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3044\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1017\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3053",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}

CVE-2005-3847 (GCVE-0-2005-3847)

Vulnerability from cvelistv5 – Published: 2005-11-27 00:00 – Updated: 2024-08-07 23:24

Summary

The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/git/?p=linux/kernel/git/chr…	x_refsource_CONFIRM
http://marc.info/?l=linux-kernel&m=112508422716574&w=2	mailing-listx_refsource_MLIST
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/16856	vdb-entryx_refsource_BID
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=112430346613450&w=2	mailing-listx_refsource_MLIST

Date Public

2005-08-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch"
          },
          {
            "name": "[linux-kernel] 20050826 [PATCH 2/7] [PATCH] NPTL signal delivery deadlock fix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112508422716574\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db"
          },
          {
            "name": "16856",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16856"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "[linux-kernel] 20050817 [PATCH 2.6.12.5] NPTL signal delivery deadlock fix",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112430346613450\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch"
        },
        {
          "name": "[linux-kernel] 20050826 [PATCH 2/7] [PATCH] NPTL signal delivery deadlock fix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112508422716574\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=dd12f48d4e8774415b528d3991ae47c28f26e1ac%3Bhp=ade6648b3b11a5d81f6f28135193ab6d85d621db"
        },
        {
          "name": "16856",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16856"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "[linux-kernel] 20050817 [PATCH 2.6.12.5] NPTL signal delivery deadlock fix",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112430346613450\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3847",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The handle_stop_signal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service (deadlock) by sending a SIGKILL to a real-time threaded process while it is performing a core dump."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "19038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19038"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=f6cc7e101c49f356e4c4df5cca1ff352a0f01dd5;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/nptl-signal-delivery-deadlock-fix.patch"
            },
            {
              "name": "[linux-kernel] 20050826 [PATCH 2/7] [PATCH] NPTL signal delivery deadlock fix",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112508422716574\u0026w=2"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=dd12f48d4e8774415b528d3991ae47c28f26e1ac;hp=ade6648b3b11a5d81f6f28135193ab6d85d621db",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=dd12f48d4e8774415b528d3991ae47c28f26e1ac;hp=ade6648b3b11a5d81f6f28135193ab6d85d621db"
            },
            {
              "name": "16856",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16856"
            },
            {
              "name": "SUSE-SA:2006:012",
              "refsource": "SUSE",
              "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "[linux-kernel] 20050817 [PATCH 2.6.12.5] NPTL signal delivery deadlock fix",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112430346613450\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3847",
    "datePublished": "2005-11-27T00:00:00.000Z",
    "dateReserved": "2005-11-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.511Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3848 (GCVE-0-2005-3848)

Vulnerability from cvelistv5 – Published: 2005-11-27 00:00 – Updated: 2024-08-07 23:24

Summary

Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

20 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=112431016816937&w=2	mailing-listx_refsource_MLIST
http://marc.info/?l=linux-kernel&m=112508479212728&w=2	mailing-listx_refsource_MLIST
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/16044	vdb-entryx_refsource_BID
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/git/?p=linux/kernel/git/chr…	x_refsource_CONFIRM
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=112439084918917&w=2	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-08-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "name": "[linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112431016816937\u0026w=2"
          },
          {
            "name": "[linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112508479212728\u0026w=2"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "16044",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16044"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a"
          },
          {
            "name": "oval:org.mitre.oval:def:11346",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "[linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112439084918917\u0026w=2"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka \"DST leak in icmp_push_reply.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "name": "[linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112431016816937\u0026w=2"
        },
        {
          "name": "[linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112508479212728\u0026w=2"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "16044",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16044"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a"
        },
        {
          "name": "oval:org.mitre.oval:def:11346",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "[linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112439084918917\u0026w=2"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3848",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka \"DST leak in icmp_push_reply.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "19038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19038"
            },
            {
              "name": "[linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112431016816937\u0026w=2"
            },
            {
              "name": "[linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112508479212728\u0026w=2"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "16044",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16044"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cb94c62c252796f42bb83fe40960d12f3ea5a82a",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cb94c62c252796f42bb83fe40960d12f3ea5a82a"
            },
            {
              "name": "oval:org.mitre.oval:def:11346",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "SUSE-SA:2006:012",
              "refsource": "SUSE",
              "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=1cf41a8a8db3080c9a9243e77c5c447c8e694f87;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=1cf41a8a8db3080c9a9243e77c5c447c8e694f87;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "[linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112439084918917\u0026w=2"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3848",
    "datePublished": "2005-11-27T00:00:00.000Z",
    "dateReserved": "2005-11-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.535Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3857 (GCVE-0-2005-3857)

Vulnerability from cvelistv5 – Published: 2005-11-27 21:00 – Updated: 2024-08-07 23:24

Summary

The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

26 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	x_refsource_MISC
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/19607	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/428058/100…	vendor-advisoryx_refsource_FEDORA
http://marc.info/?l=linux-kernel&m=113190437101622&w=2	mailing-listx_refsource_MLIST
http://www.securityfocus.com/archive/1/427981/100…	vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/428028/100…	vendor-advisoryx_refsource_FEDORA
http://marc.info/?l=linux-kernel&m=113175851920568&w=2	mailing-listx_refsource_MLIST
http://www.trustix.org/errata/2005/0070	vendor-advisoryx_refsource_TRUSTIX
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/15627	vdb-entryx_refsource_BID
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/17787	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17786	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2649	vdb-entryx_refsource_VUPEN

Date Public

2005-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.522Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "oval:org.mitre.oval:def:9727",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727"
          },
          {
            "name": "19607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19607"
          },
          {
            "name": "FLSA:157459-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
          },
          {
            "name": "[linux-kernel] 20051113 [GIT] Fix memory leak in lease code",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113190437101622\u0026w=2"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "FLSA:157459-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
          },
          {
            "name": "[linux-kernel] 20051112 Re: local denial-of-service with file leases",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113175851920568\u0026w=2"
          },
          {
            "name": "TSLSA-2005-0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2005/0070"
          },
          {
            "name": "20060402-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "15627",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15627"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "17787",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17787"
          },
          {
            "name": "17786",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17786"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          },
          {
            "name": "ADV-2005-2649",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2649"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "oval:org.mitre.oval:def:9727",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727"
        },
        {
          "name": "19607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19607"
        },
        {
          "name": "FLSA:157459-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
        },
        {
          "name": "[linux-kernel] 20051113 [GIT] Fix memory leak in lease code",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113190437101622\u0026w=2"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "FLSA:157459-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
        },
        {
          "name": "[linux-kernel] 20051112 Re: local denial-of-service with file leases",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113175851920568\u0026w=2"
        },
        {
          "name": "TSLSA-2005-0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2005/0070"
        },
        {
          "name": "20060402-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "15627",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15627"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "17787",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17787"
        },
        {
          "name": "17786",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17786"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        },
        {
          "name": "ADV-2005-2649",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2649"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3857",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ed0175a462c4c30f6df6fac1cccac058f997739",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ed0175a462c4c30f6df6fac1cccac058f997739"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "oval:org.mitre.oval:def:9727",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727"
            },
            {
              "name": "19607",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19607"
            },
            {
              "name": "FLSA:157459-2",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
            },
            {
              "name": "[linux-kernel] 20051113 [GIT] Fix memory leak in lease code",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113190437101622\u0026w=2"
            },
            {
              "name": "FLSA:157459-4",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "FLSA:157459-1",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
            },
            {
              "name": "[linux-kernel] 20051112 Re: local denial-of-service with file leases",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113175851920568\u0026w=2"
            },
            {
              "name": "TSLSA-2005-0070",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2005/0070"
            },
            {
              "name": "20060402-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "15627",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15627"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "17787",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17787"
            },
            {
              "name": "17786",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17786"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            },
            {
              "name": "ADV-2005-2649",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2649"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3857",
    "datePublished": "2005-11-27T21:00:00.000Z",
    "dateReserved": "2005-11-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.522Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3858 (GCVE-0-2005-3858)

Vulnerability from cvelistv5 – Published: 2005-11-27 22:00 – Updated: 2024-08-07 23:24

Summary

Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/16043	vdb-entryx_refsource_BID
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=linux-kernel&m=112533899509033&w=2	mailing-listx_refsource_MLIST
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=linux-kernel&m=112508479120081&w=2	mailing-listx_refsource_MLIST
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-08-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.545Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "name": "16043",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16043"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "[linux-kernel] 20050829 Re: Linux 2.6.12.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112533899509033\u0026w=2"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "name": "[linux-kernel] 20050826 [PATCH 7/7] [IPV6]: Fix SKB leak in ip6_input_finish()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112508479120081\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:9396",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "name": "16043",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16043"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "[linux-kernel] 20050829 Re: Linux 2.6.12.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112533899509033\u0026w=2"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "name": "[linux-kernel] 20050826 [PATCH 7/7] [IPV6]: Fix SKB leak in ip6_input_finish()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112508479120081\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:9396",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3858",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "19038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19038"
            },
            {
              "name": "16043",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16043"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "[linux-kernel] 20050829 Re: Linux 2.6.12.6",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112533899509033\u0026w=2"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "SUSE-SA:2006:012",
              "refsource": "SUSE",
              "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
            },
            {
              "name": "[linux-kernel] 20050826 [PATCH 7/7] [IPV6]: Fix SKB leak in ip6_input_finish()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112508479120081\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:9396",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3858",
    "datePublished": "2005-11-27T22:00:00.000Z",
    "dateReserved": "2005-11-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-4605 (GCVE-0-2005-4605)

Vulnerability from cvelistv5 – Published: 2006-01-03 16:00 – Updated: 2024-08-07 23:53

Summary

The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

22 references

URL	Tags
http://secunia.com/advisories/18788	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://linux.bkbits.net:8080/linux-2.6/cset%4043b…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/16284	vdb-entryx_refsource_BID
http://linux.bkbits.net:8080/linux-2.6/gnupatch%4…	x_refsource_CONFIRM
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/427981/100…	vendor-advisoryx_refsource_FEDORA
http://marc.info/?l=full-disclosure&m=11353538042…	mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
http://secunia.com/advisories/18351	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18216	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/archives/fedora-announce-li…	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/244-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18527	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-12-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:53:28.288Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "18788",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18788"
          },
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ"
          },
          {
            "name": "MDKSA-2006:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11747",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747"
          },
          {
            "name": "linux-procfs-information-disclosure(23811)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23811"
          },
          {
            "name": "16284",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16284"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ"
          },
          {
            "name": "SUSE-SA:2006:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_06_kernel.html"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "20051223 linux procfs vulnerablity",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=full-disclosure\u0026m=113535380422339\u0026w=2"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf"
          },
          {
            "name": "18351",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18351"
          },
          {
            "name": "18216",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18216"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "USN-244-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/244-1/"
          },
          {
            "name": "18527",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18527"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "18788",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18788"
        },
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ"
        },
        {
          "name": "MDKSA-2006:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11747",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747"
        },
        {
          "name": "linux-procfs-information-disclosure(23811)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23811"
        },
        {
          "name": "16284",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16284"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ"
        },
        {
          "name": "SUSE-SA:2006:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_06_kernel.html"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "20051223 linux procfs vulnerablity",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://marc.info/?l=full-disclosure\u0026m=113535380422339\u0026w=2"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf"
        },
        {
          "name": "18351",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18351"
        },
        {
          "name": "18216",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18216"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "USN-244-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/244-1/"
        },
        {
          "name": "18527",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18527"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-4605",
    "datePublished": "2006-01-03T16:00:00.000Z",
    "dateReserved": "2006-01-03T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:53:28.288Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-4618 (GCVE-0-2005-4618)

Vulnerability from cvelistv5 – Published: 2006-01-05 11:00 – Updated: 2024-08-07 23:53

Summary

Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_MISC
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/16141	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0035	vdb-entryx_refsource_VUPEN
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_MISC
http://secunia.com/advisories/18216	third-party-advisoryx_refsource_SECUNIA
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog…	x_refsource_MISC
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/244-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18527	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-12-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:53:27.796Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c"
          },
          {
            "name": "MDKSA-2006:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "16141",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16141"
          },
          {
            "name": "ADV-2006-0035",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0035"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
          },
          {
            "name": "18216",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18216"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "USN-244-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/244-1/"
          },
          {
            "name": "18527",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18527"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c"
        },
        {
          "name": "MDKSA-2006:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "16141",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16141"
        },
        {
          "name": "ADV-2006-0035",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0035"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
        },
        {
          "name": "18216",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18216"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "USN-244-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/244-1/"
        },
        {
          "name": "18527",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18527"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4618",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c",
              "refsource": "MISC",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c"
            },
            {
              "name": "MDKSA-2006:040",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "16141",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16141"
            },
            {
              "name": "ADV-2006-0035",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0035"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
              "refsource": "MISC",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
            },
            {
              "name": "18216",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18216"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
              "refsource": "MISC",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "USN-244-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/244-1/"
            },
            {
              "name": "18527",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18527"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4618",
    "datePublished": "2006-01-05T11:00:00.000Z",
    "dateReserved": "2006-01-05T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:53:27.796Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0095 (GCVE-0-2006-0095)

Vulnerability from cvelistv5 – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:18

Summary

dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

23 references

URL	Tags
http://securityreason.com/securityalert/388	third-party-advisoryx_refsource_SREASON
http://marc.info/?l=linux-kernel&m=113641114812886&w=2	mailing-listx_refsource_MLIST
http://secunia.com/advisories/19160	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.trustix.org/errata/2006/0004	vendor-advisoryx_refsource_TRUSTIX
http://www.securityfocus.com/bid/16301	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://securitytracker.com/id?1015740	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/18774	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=113640535312572&w=2	mailing-listx_refsource_MLIST
http://www.redhat.com/archives/fedora-announce-li…	vendor-advisoryx_refsource_FEDORA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/427981/100…	vendor-advisoryx_refsource_FEDORA
http://www.osvdb.org/22418	vdb-entryx_refsource_OSVDB
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/20398	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://usn.ubuntu.com/244-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18527	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/0235	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18487	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public

2006-01-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:18:20.862Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "388",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/388"
          },
          {
            "name": "[linux-kernel] 20060104 [Patch 2.6] dm-crypt: Zero key material before free to avoid information leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113641114812886\u0026w=2"
          },
          {
            "name": "19160",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19160"
          },
          {
            "name": "MDKSA-2006:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
          },
          {
            "name": "2006-0004",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0004"
          },
          {
            "name": "16301",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16301"
          },
          {
            "name": "RHSA-2006:0132",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0132.html"
          },
          {
            "name": "1015740",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015740"
          },
          {
            "name": "18774",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18774"
          },
          {
            "name": "[linux-kernel] 20060104 [Patch 2.6] dm-crypt: zero key before freeing it",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113640535312572\u0026w=2"
          },
          {
            "name": "FEDORA-2006-102",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html"
          },
          {
            "name": "SUSE-SA:2006:028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006-05-31.html"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "22418",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/22418"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "20398",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20398"
          },
          {
            "name": "kernel-dmcrypt-information-disclosure(24189)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24189"
          },
          {
            "name": "USN-244-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/244-1/"
          },
          {
            "name": "18527",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18527"
          },
          {
            "name": "ADV-2006-0235",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0235"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "18487",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18487"
          },
          {
            "name": "oval:org.mitre.oval:def:11192",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "388",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/388"
        },
        {
          "name": "[linux-kernel] 20060104 [Patch 2.6] dm-crypt: Zero key material before free to avoid information leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113641114812886\u0026w=2"
        },
        {
          "name": "19160",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19160"
        },
        {
          "name": "MDKSA-2006:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
        },
        {
          "name": "2006-0004",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0004"
        },
        {
          "name": "16301",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16301"
        },
        {
          "name": "RHSA-2006:0132",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0132.html"
        },
        {
          "name": "1015740",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015740"
        },
        {
          "name": "18774",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18774"
        },
        {
          "name": "[linux-kernel] 20060104 [Patch 2.6] dm-crypt: zero key before freeing it",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113640535312572\u0026w=2"
        },
        {
          "name": "FEDORA-2006-102",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html"
        },
        {
          "name": "SUSE-SA:2006:028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006-05-31.html"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "22418",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/22418"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "20398",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20398"
        },
        {
          "name": "kernel-dmcrypt-information-disclosure(24189)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24189"
        },
        {
          "name": "USN-244-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/244-1/"
        },
        {
          "name": "18527",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18527"
        },
        {
          "name": "ADV-2006-0235",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0235"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "18487",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18487"
        },
        {
          "name": "oval:org.mitre.oval:def:11192",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "388",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/388"
            },
            {
              "name": "[linux-kernel] 20060104 [Patch 2.6] dm-crypt: Zero key material before free to avoid information leak",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113641114812886\u0026w=2"
            },
            {
              "name": "19160",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19160"
            },
            {
              "name": "MDKSA-2006:040",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
            },
            {
              "name": "2006-0004",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0004"
            },
            {
              "name": "16301",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16301"
            },
            {
              "name": "RHSA-2006:0132",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0132.html"
            },
            {
              "name": "1015740",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015740"
            },
            {
              "name": "18774",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18774"
            },
            {
              "name": "[linux-kernel] 20060104 [Patch 2.6] dm-crypt: zero key before freeing it",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113640535312572\u0026w=2"
            },
            {
              "name": "FEDORA-2006-102",
              "refsource": "FEDORA",
              "url": "http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html"
            },
            {
              "name": "SUSE-SA:2006:028",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006-05-31.html"
            },
            {
              "name": "FLSA:157459-4",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
            },
            {
              "name": "22418",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/22418"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "20398",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20398"
            },
            {
              "name": "kernel-dmcrypt-information-disclosure(24189)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24189"
            },
            {
              "name": "USN-244-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/244-1/"
            },
            {
              "name": "18527",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18527"
            },
            {
              "name": "ADV-2006-0235",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0235"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "18487",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18487"
            },
            {
              "name": "oval:org.mitre.oval:def:11192",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0095",
    "datePublished": "2006-01-06T11:00:00.000Z",
    "dateReserved": "2006-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:18:20.862Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0096 (GCVE-0-2006-0096)

Vulnerability from cvelistv5 – Published: 2006-01-06 11:00 – Updated: 2024-08-07 16:25

Summary

wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
http://www.securityfocus.com/bid/16304	vdb-entryx_refsource_BID
http://secunia.com/advisories/18977	third-party-advisoryx_refsource_SECUNIA
http://linux.bkbits.net:8080/linux-2.4/cset%401.1…	x_refsource_CONFIRM
http://wwwnew.mandriva.com/security/advisories?na…	vendor-advisoryx_refsource_MANDRIVA
http://www.kernel.org/git/?p=linux/kernel/git/tgl…	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/244-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18527	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2006-01-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:25:32.790Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "16304",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16304"
          },
          {
            "name": "18977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18977"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c"
          },
          {
            "name": "MDKSA-2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "USN-244-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/244-1/"
          },
          {
            "name": "18527",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18527"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors.  NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "16304",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16304"
        },
        {
          "name": "18977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18977"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c"
        },
        {
          "name": "MDKSA-2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "USN-244-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/244-1/"
        },
        {
          "name": "18527",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18527"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0096",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors.  NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "16304",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16304"
            },
            {
              "name": "18977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18977"
            },
            {
              "name": "http://linux.bkbits.net:8080/linux-2.4/cset@1.1448.91.23?nav=index.html|src/|src/drivers|src/drivers/net|src/drivers/net/wan|related/drivers/net/wan/sdla.c",
              "refsource": "CONFIRM",
              "url": "http://linux.bkbits.net:8080/linux-2.4/cset@1.1448.91.23?nav=index.html|src/|src/drivers|src/drivers/net|src/drivers/net/wan|related/drivers/net/wan/sdla.c"
            },
            {
              "name": "MDKSA-2006:044",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git;a=commitdiff;h=0f1d4813a4a65296e1131f320a60741732bc068f",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git;a=commitdiff;h=0f1d4813a4a65296e1131f320a60741732bc068f"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "USN-244-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/244-1/"
            },
            {
              "name": "18527",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18527"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0096",
    "datePublished": "2006-01-06T11:00:00.000Z",
    "dateReserved": "2006-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:25:32.790Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0482 (GCVE-0-2006-0482)

Vulnerability from cvelistv5 – Published: 2006-01-31 19:00 – Updated: 2024-08-07 16:34

Summary

Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date -s" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
http://marc.info/?l=linux-sparc&m=113861010514065&w=2	mailing-listx_refsource_MLIST
http://marc.info/?l=linux-sparc&m=113861287813463&w=2	mailing-listx_refsource_MLIST
http://lists.debian.org/debian-sparc/2006/01/msg0…	mailing-listx_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/17216	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0418	vdb-entryx_refsource_VUPEN
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2006-01-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:34:14.852Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[linux-sparc] 20060130 Attempts to set date with \u0027date -s\u0027 hang the machine",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-sparc\u0026m=113861010514065\u0026w=2"
          },
          {
            "name": "[linux-sparc] 20060130 Re: Attempts to set date with \u0027date -s\u0027 hang the machine",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-sparc\u0026m=113861287813463\u0026w=2"
          },
          {
            "name": "[debian-sparc] 20060128 `date -s\u0027 on sparc64",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.debian.org/debian-sparc/2006/01/msg00129.html"
          },
          {
            "name": "kernel-date-s-dos(24475)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24475"
          },
          {
            "name": "17216",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17216"
          },
          {
            "name": "ADV-2006-0418",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0418"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-01-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a \"date -s\" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[linux-sparc] 20060130 Attempts to set date with \u0027date -s\u0027 hang the machine",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-sparc\u0026m=113861010514065\u0026w=2"
        },
        {
          "name": "[linux-sparc] 20060130 Re: Attempts to set date with \u0027date -s\u0027 hang the machine",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-sparc\u0026m=113861287813463\u0026w=2"
        },
        {
          "name": "[debian-sparc] 20060128 `date -s\u0027 on sparc64",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.debian.org/debian-sparc/2006/01/msg00129.html"
        },
        {
          "name": "kernel-date-s-dos(24475)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24475"
        },
        {
          "name": "17216",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17216"
        },
        {
          "name": "ADV-2006-0418",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0418"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0482",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a \"date -s\" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[linux-sparc] 20060130 Attempts to set date with \u0027date -s\u0027 hang the machine",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-sparc\u0026m=113861010514065\u0026w=2"
            },
            {
              "name": "[linux-sparc] 20060130 Re: Attempts to set date with \u0027date -s\u0027 hang the machine",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-sparc\u0026m=113861287813463\u0026w=2"
            },
            {
              "name": "[debian-sparc] 20060128 `date -s\u0027 on sparc64",
              "refsource": "MLIST",
              "url": "http://lists.debian.org/debian-sparc/2006/01/msg00129.html"
            },
            {
              "name": "kernel-date-s-dos(24475)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24475"
            },
            {
              "name": "17216",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17216"
            },
            {
              "name": "ADV-2006-0418",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0418"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0482",
    "datePublished": "2006-01-31T19:00:00.000Z",
    "dateReserved": "2006-01-31T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:34:14.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1066 (GCVE-0-2006-1066)

Vulnerability from cvelistv5 – Published: 2006-03-27 00:00 – Updated: 2024-08-07 16:56

Summary

Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://usn.ubuntu.com/281-1/	vendor-advisoryx_refsource_UBUNTU
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/21614	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19955	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17216	vdb-entryx_refsource_BID
http://www.osvdb.org/24098	vdb-entryx_refsource_OSVDB
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=113932292516359&w=2	mailing-listx_refsource_MLIST

Date Public

2006-02-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:15.524Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-281-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/281-1/"
          },
          {
            "name": "MDKSA-2006:151",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151"
          },
          {
            "name": "21614",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21614"
          },
          {
            "name": "19955",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19955"
          },
          {
            "name": "17216",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17216"
          },
          {
            "name": "24098",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24098"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "[linux-kernel] 20060207 [PATCH] arch/x86_64/kernel/traps.c PTRACE_SINGLESTEP oops",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113932292516359\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-02-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-281-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/281-1/"
        },
        {
          "name": "MDKSA-2006:151",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151"
        },
        {
          "name": "21614",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21614"
        },
        {
          "name": "19955",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19955"
        },
        {
          "name": "17216",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17216"
        },
        {
          "name": "24098",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24098"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "[linux-kernel] 20060207 [PATCH] arch/x86_64/kernel/traps.c PTRACE_SINGLESTEP oops",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113932292516359\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1066",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-281-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/281-1/"
            },
            {
              "name": "MDKSA-2006:151",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:151"
            },
            {
              "name": "21614",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21614"
            },
            {
              "name": "19955",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19955"
            },
            {
              "name": "17216",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17216"
            },
            {
              "name": "24098",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24098"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "[linux-kernel] 20060207 [PATCH] arch/x86_64/kernel/traps.c PTRACE_SINGLESTEP oops",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113932292516359\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1066",
    "datePublished": "2006-03-27T00:00:00.000Z",
    "dateReserved": "2006-03-07T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:56:15.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-02302 (CVE-2004-1017)

CVE-2005-3847 (GCVE-0-2005-3847)

CVE-2005-3848 (GCVE-0-2005-3848)

CVE-2005-3857 (GCVE-0-2005-3857)

CVE-2005-3858 (GCVE-0-2005-3858)

CVE-2005-4605 (GCVE-0-2005-4605)

CVE-2005-4618 (GCVE-0-2005-4618)

CVE-2006-0095 (GCVE-0-2006-0095)

CVE-2006-0096 (GCVE-0-2006-0096)

CVE-2006-0482 (GCVE-0-2006-0482)

CVE-2006-1066 (GCVE-0-2006-1066)

Tags

Sightings

Nomenclature

Related by attack behaviour