Vulnerability-Lookup

BDU:2015-03254 (CVE-2004-0887)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed

Title

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации

Summary

Множественные уязвимости пакета kernel-pcmcia-modules-2.4-586tsc операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2004-0887, CVE-2004-1058, CVE-2004-2607, CVE-2005-0449, CVE-2005-1761, CVE-2005-2457, CVE-2005-2555, CVE-2005-2709, CVE-2005-2973, CVE-2005-3257, CVE-2005-3783, CVE-2005-3806, CVE-2005-3848, CVE-2005-3857, CVE-2005-3858, CVE-2005-4618, DSA-1018, ID:1401638

References

17 references

URL
http://www.debian.org/security/dsa-1018/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2607
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2457
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4618
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3783
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0887
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1761

Impacted products

1 product from 1 vendor

Vendors

Сообщество свободного программного обеспечения

Products

Debian GNU/Linux

Versions

до 3.1 (Debian GNU/Linux)

Product types

Operating system

Mitigations

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры: Debian GNU/Linux 3.1: ppc: kernel-patch-2.4.27-powerpc - 2.4.27-10sarge2 kernel-headers-2.4.27-powerpc - 2.4.27-10sarge2 kernel-image-2.4.27-nubus - 2.4.27-10sarge2 kernel-image-2.4.27-powerpc-small - 2.4.27-10sarge2 kernel-patch-2.4.27-nubus - 2.4.27-10sarge2 kernel-patch-2.4.27-apus - 2.4.27-10sarge2 kernel-image-2.4.27-apus - 2.4.27-10sarge2 kernel-build-2.4.27-powerpc-small - 2.4.27-10sarge2 kernel-image-2.4.27-powerpc - 2.4.27-10sarge2 kernel-build-2.4.27-apus - 2.4.27-10sarge2 kernel-build-2.4.27-powerpc - 2.4.27-10sarge2 kernel-headers-2.4.27-nubus - 2.4.27-10sarge2 kernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-apus - 2.4.27-10sarge2 kernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge2 kernel-build-2.4.27-nubus - 2.4.27-10sarge2 s390x: kernel-image-2.4-s390x - 2.4.27-1sarge1 kernel-image-2.4.27-3-s390 - 2.4.27-2sarge2 kernel-image-2.4-s390 - 2.4.27-1sarge1 kernel-image-2.4.27-3-s390x - 2.4.27-2sarge2 kernel-headers-2.4.27-3 - 2.4.27-2sarge2 kernel-headers-2.4-s390 - 2.4.27-1sarge1 kernel-image-2.4.27-3-s390-tape - 2.4.27-2sarge2 m68k: kernel-image-2.4.27-mvme147 - 2.4.27-3sarge2 kernel-image-2.4.27-amiga - 2.4.27-3sarge2 kernel-image-2.4.27-mvme16x - 2.4.27-3sarge2 kernel-image-2.4.27-bvme6000 - 2.4.27-3sarge2 kernel-image-2.4.27-q40 - 2.4.27-3sarge2 kernel-image-2.4.27-atari - 2.4.27-3sarge2 kernel-image-2.4.27-mac - 2.4.27-3sarge2 i686: kernel-image-2.4.27-speakup - 2.4.27-1.1sarge1 kernel-headers-2.4.27-3 - 2.4.27-10sarge2 kernel-image-2.4.27-3-686 - 2.4.27-10sarge2 kernel-headers-2.4-686-smp - 101sarge1 lm-sensors-2.4.27-3-k6 - 2.9.1-1sarge3 kernel-image-2.4-k6 - 101sarge1 kernel-headers-2.4.27-3-586tsc - 2.4.27-10sarge2 pcmcia-modules-2.4.27-3-k7 - 3.2.5+2sarge1 kernel-image-2.4.27-3-386 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-k7-smp - 2.4.27-10sarge2 kernel-pcmcia-modules-2.4-386 - 101sarge1 lm-sensors-2.4.27-3-586tsc - 2.9.1-1sarge3 kernel-pcmcia-modules-2.4.27-3-386 - 2.4.27-10sarge2 lm-sensors-2.4.27-3-686-smp - 2.9.1-1sarge3 kernel-image-2.4-586tsc - 101sarge1 pcmcia-modules-2.4.27-3-686-smp - 3.2.5+2sarge1 pcmcia-modules-2.4.27-3-386 - 3.2.5+2sarge1 pcmcia-modules-2.4.27-3-586tsc - 3.2.5+2sarge1 kernel-pcmcia-modules-2.4.27-3-k7 - 2.4.27-10sarge2 kernel-headers-2.4-386 - 101sarge1 kernel-pcmcia-modules-2.4.27-3-686 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-386 - 2.4.27-10sarge2 kernel-headers-2.4-686 - 101sarge1 kernel-image-2.4.27-3-586tsc - 2.4.27-10sarge2 mindi-kernel - 2.4.27-2sarge1 i2c-2.4.27-3-386 - 2.9.1-1sarge1 lm-sensors-2.4.27-3-386 - 2.9.1-1sarge3 kernel-pcmcia-modules-2.4.27-3-k7-smp - 2.4.27-10sarge2 kernel-headers-2.4-k7-smp - 101sarge1 kernel-pcmcia-modules-2.4.27-3-586tsc - 2.4.27-10sarge2 kernel-image-2.4.27-3-k7-smp - 2.4.27-10sarge2 kernel-image-2.4-k7 - 101sarge1 pcmcia-modules-2.4.27-3-686 - 3.2.5+2sarge1 i2c-2.4.27-3-k6 - 2.9.1-1sarge1 kernel-headers-2.4-586tsc - 101sarge1 kernel-pcmcia-modules-2.4-k7-smp - 101sarge1 kernel-headers-2.4.27-3-686 - 2.4.27-10sarge2 kernel-pcmcia-modules-2.4-586tsc - 101sarge1 kernel-pcmcia-modules-2.4.27-3-k6 - 2.4.27-10sarge2 kernel-pcmcia-modules-2.4-686 - 101sarge1 kernel-image-2.4-386 - 101sarge1 kernel-image-2.4-686 - 101sarge1 kernel-image-2.4-686-smp - 101sarge1 kernel-image-2.4-k7-smp - 101sarge1 kernel-pcmcia-modules-2.4-686-smp - 101sarge1 libsensors-dev - 2.9.1-1sarge3 kernel-image-2.4.27-3-k6 - 2.4.27-10sarge2 i2c-2.4.27-3-k7-smp - 2.9.1-1sarge1 kernel-pcmcia-modules-2.4-k6 - 101sarge1 kernel-pcmcia-modules-2.4-k7 - 101sarge1 i2c-2.4.27-3-586tsc - 2.9.1-1sarge1 kernel-image-2.4.27-3-686-smp - 2.4.27-10sarge2 lm-sensors-2.4.27-3-686 - 2.9.1-1sarge3 sensord - 2.9.1-1sarge3 pcmcia-modules-2.4.27-3-k6 - 3.2.5+2sarge1 kernel-pcmcia-modules-2.4.27-3-686-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-speakup - 2.4.27-1.1sarge1 kernel-headers-2.4.27-3-686-smp - 2.4.27-10sarge2 lm-sensors-2.4.27-3-k7 - 2.9.1-1sarge3 kernel-headers-2.4.27-3-k6 - 2.4.27-10sarge2 lm-sensors - 2.9.1-1sarge3 kernel-headers-2.4-k6 - 101sarge1 i2c-2.4.27-3-686 - 2.9.1-1sarge1 i2c-2.4.27-3-686-smp - 2.9.1-1sarge1 kernel-build-2.4.27-3 - 2.4.27-10sarge2 lm-sensors-2.4.27-3-k7-smp - 2.9.1-1sarge3 i2c-2.4.27-3-k7 - 2.9.1-1sarge1 kernel-image-2.4.27-3-k7 - 2.4.27-10sarge2 kernel-headers-2.4-k7 - 101sarge1 pcmcia-modules-2.4.27-3-k7-smp - 3.2.5+2sarge1 kernel-headers-2.4.27-3-k7 - 2.4.27-10sarge2 libsensors3 - 2.9.1-1sarge3 sparc: kernel-image-2.4-sparc32 - 42sarge1 kernel-image-2.4.27-3-sparc32-smp - 2.4.27-9sarge2 kernel-image-2.4-sparc64-smp - 42sarge1 kernel-image-2.4.27-3-sparc32 - 2.4.27-9sarge2 kernel-headers-2.4.27-3-sparc64-smp - 2.4.27-9sarge2 kernel-headers-2.4.27-3-sparc32 - 2.4.27-9sarge2 kernel-headers-2.4.27-3-sparc64 - 2.4.27-9sarge2 kernel-build-2.4.27-3 - 2.4.27-9sarge2 kernel-image-2.4-sparc32-smp - 42sarge1 kernel-headers-2.4-sparc32-smp - 42sarge1 kernel-image-2.4.27-3-sparc64 - 2.4.27-9sarge2 kernel-image-2.4.27-3-sparc64-smp - 2.4.27-9sarge2 kernel-image-2.4-sparc64 - 42sarge1 kernel-headers-2.4-sparc64 - 42sarge1 kernel-headers-2.4.27-3-sparc32-smp - 2.4.27-9sarge2 kernel-headers-2.4-sparc32 - 42sarge1 kernel-headers-2.4-sparc64-smp - 42sarge1 kernel-headers-2.4.27-3 - 2.4.27-9sarge2 alpha: kernel-headers-2.4.27-3 - 2.4.27-10sarge2 kernel-image-2.4-smp - 101sarge1 kernel-image-2.4-generic - 101sarge1 kernel-image-2.4.27-3-generic - 2.4.27-10sarge2 kernel-image-2.4.27-3-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-3-generic - 2.4.27-10sarge2 kernel-headers-2.4-generic - 101sarge1 kernel-build-2.4.27-3 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-smp - 2.4.27-10sarge2 kernel-headers-2.4-smp - 101sarge1 ia64: kernel-image-2.4.27-3-mckinley-smp - 2.4.27-10sarge2 kernel-image-2.4.27-3-itanium-smp - 2.4.27-10sarge2 kernel-image-2.4-mckinley - 2.4.27-10sarge2 kernel-headers-2.4.27-3-itanium-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-3-mckinley-smp - 2.4.27-10sarge2 kernel-image-2.4-itanium - 2.4.27-10sarge2 kernel-build-2.4.27-3 - 2.4.27-10sarge2 kernel-headers-2.4.27-3-itanium - 2.4.27-10sarge2 kernel-image-2.4-mckinley-smp - 2.4.27-10sarge2 kernel-headers-2.4.27-3 - 2.4.27-10sarge2 kernel-image-2.4-itanium-smp - 2.4.27-10sarge2 kernel-image-2.4.27-3-mckinley - 2.4.27-10sarge2 kernel-headers-2.4.27-3-mckinley - 2.4.27-10sarge2 kernel-image-2.4.27-3-itanium - 2.4.27-10sarge2 mips: kernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1 kernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1 mips-tools - 2.4.27-10.sarge2.040815-1 noarch: kernel-patch-debian-2.4.27 - 2.4.27-10sarge2 lm-sensors-source - 2.9.1-1sarge3 kernel-doc-2.4.27-speakup - 2.4.27-1.1sarge1 systemimager-boot-ia64-standard - 3.2.3-6sarge1 systemimager-boot-i386-standard - 3.2.3-6sarge1 i2c-source - 2.9.1-1sarge1 kernel-doc-2.4.27 - 2.4.27-10sarge2 kernel-tree-2.4.27 - 2.4.27-10sarge2 systemimager-common - 3.2.3-6sarge1 systemimager-doc - 3.2.3-6sarge1 kernel-patch-2.4-i2c - 2.9.1-1sarge1 systemimager-server - 3.2.3-6sarge1 kernel-source-2.4.27 - 2.4.27-10sarge2 systemimager-client - 3.2.3-6sarge1 systemimager-server-flamethrowerd - 3.2.3-6sarge1 kernel-patch-2.4-lm-sensors - 2.9.1-1sarge3 mipsel: kernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge2.040815-1 mips-tools - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge2.040815-1 kernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1 kernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1 arm: kernel-headers-2.4.27 - 2.4.27-2sarge2 kernel-image-2.4.27-riscpc - 2.4.27-2sarge2 kernel-image-2.4.27-riscstation - 2.4.27-2sarge2 kernel-image-2.4.27-netwinder - 2.4.27-2sarge2 kernel-image-2.4.27-lart - 2.4.27-2sarge2 kernel-build-2.4.27 - 2.4.27-2sarge2 kernel-image-2.4.27-bast - 2.4.27-2sarg

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 3.1 (Debian GNU/Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 3.1:\n\tppc:\n\t\tkernel-patch-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-nubus - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-powerpc-small - 2.4.27-10sarge2\n\t\tkernel-patch-2.4.27-nubus - 2.4.27-10sarge2\n\t\tkernel-patch-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-powerpc-small - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-powerpc - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-nubus - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-powerpc-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-apus - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-powerpc-smp - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-nubus - 2.4.27-10sarge2\n\ts390x:\n\t\tkernel-image-2.4-s390x - 2.4.27-1sarge1\n\t\tkernel-image-2.4.27-3-s390 - 2.4.27-2sarge2\n\t\tkernel-image-2.4-s390 - 2.4.27-1sarge1\n\t\tkernel-image-2.4.27-3-s390x - 2.4.27-2sarge2\n\t\tkernel-headers-2.4.27-3 - 2.4.27-2sarge2\n\t\tkernel-headers-2.4-s390 - 2.4.27-1sarge1\n\t\tkernel-image-2.4.27-3-s390-tape - 2.4.27-2sarge2\n\tm68k:\n\t\tkernel-image-2.4.27-mvme147 - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-amiga - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-mvme16x - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-bvme6000 - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-q40 - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-atari - 2.4.27-3sarge2\n\t\tkernel-image-2.4.27-mac - 2.4.27-3sarge2\n\ti686:\n\t\tkernel-image-2.4.27-speakup - 2.4.27-1.1sarge1\n\t\tkernel-headers-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-686 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-686-smp - 101sarge1\n\t\tlm-sensors-2.4.27-3-k6 - 2.9.1-1sarge3\n\t\tkernel-image-2.4-k6 - 101sarge1\n\t\tkernel-headers-2.4.27-3-586tsc - 2.4.27-10sarge2\n\t\tpcmcia-modules-2.4.27-3-k7 - 3.2.5+2sarge1\n\t\tkernel-image-2.4.27-3-386 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-k7-smp - 2.4.27-10sarge2\n\t\tkernel-pcmcia-modules-2.4-386 - 101sarge1\n\t\tlm-sensors-2.4.27-3-586tsc - 2.9.1-1sarge3\n\t\tkernel-pcmcia-modules-2.4.27-3-386 - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-686-smp - 2.9.1-1sarge3\n\t\tkernel-image-2.4-586tsc - 101sarge1\n\t\tpcmcia-modules-2.4.27-3-686-smp - 3.2.5+2sarge1\n\t\tpcmcia-modules-2.4.27-3-386 - 3.2.5+2sarge1\n\t\tpcmcia-modules-2.4.27-3-586tsc - 3.2.5+2sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-k7 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-386 - 101sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-686 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-386 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-686 - 101sarge1\n\t\tkernel-image-2.4.27-3-586tsc - 2.4.27-10sarge2\n\t\tmindi-kernel - 2.4.27-2sarge1\n\t\ti2c-2.4.27-3-386 - 2.9.1-1sarge1\n\t\tlm-sensors-2.4.27-3-386 - 2.9.1-1sarge3\n\t\tkernel-pcmcia-modules-2.4.27-3-k7-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-k7-smp - 101sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-586tsc - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-k7-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4-k7 - 101sarge1\n\t\tpcmcia-modules-2.4.27-3-686 - 3.2.5+2sarge1\n\t\ti2c-2.4.27-3-k6 - 2.9.1-1sarge1\n\t\tkernel-headers-2.4-586tsc - 101sarge1\n\t\tkernel-pcmcia-modules-2.4-k7-smp - 101sarge1\n\t\tkernel-headers-2.4.27-3-686 - 2.4.27-10sarge2\n\t\tkernel-pcmcia-modules-2.4-586tsc - 101sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-k6 - 2.4.27-10sarge2\n\t\tkernel-pcmcia-modules-2.4-686 - 101sarge1\n\t\tkernel-image-2.4-386 - 101sarge1\n\t\tkernel-image-2.4-686 - 101sarge1\n\t\tkernel-image-2.4-686-smp - 101sarge1\n\t\tkernel-image-2.4-k7-smp - 101sarge1\n\t\tkernel-pcmcia-modules-2.4-686-smp - 101sarge1\n\t\tlibsensors-dev - 2.9.1-1sarge3\n\t\tkernel-image-2.4.27-3-k6 - 2.4.27-10sarge2\n\t\ti2c-2.4.27-3-k7-smp - 2.9.1-1sarge1\n\t\tkernel-pcmcia-modules-2.4-k6 - 101sarge1\n\t\tkernel-pcmcia-modules-2.4-k7 - 101sarge1\n\t\ti2c-2.4.27-3-586tsc - 2.9.1-1sarge1\n\t\tkernel-image-2.4.27-3-686-smp - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-686 - 2.9.1-1sarge3\n\t\tsensord - 2.9.1-1sarge3\n\t\tpcmcia-modules-2.4.27-3-k6 - 3.2.5+2sarge1\n\t\tkernel-pcmcia-modules-2.4.27-3-686-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-speakup - 2.4.27-1.1sarge1\n\t\tkernel-headers-2.4.27-3-686-smp - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-k7 - 2.9.1-1sarge3\n\t\tkernel-headers-2.4.27-3-k6 - 2.4.27-10sarge2\n\t\tlm-sensors - 2.9.1-1sarge3\n\t\tkernel-headers-2.4-k6 - 101sarge1\n\t\ti2c-2.4.27-3-686 - 2.9.1-1sarge1\n\t\ti2c-2.4.27-3-686-smp - 2.9.1-1sarge1\n\t\tkernel-build-2.4.27-3 - 2.4.27-10sarge2\n\t\tlm-sensors-2.4.27-3-k7-smp - 2.9.1-1sarge3\n\t\ti2c-2.4.27-3-k7 - 2.9.1-1sarge1\n\t\tkernel-image-2.4.27-3-k7 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-k7 - 101sarge1\n\t\tpcmcia-modules-2.4.27-3-k7-smp - 3.2.5+2sarge1\n\t\tkernel-headers-2.4.27-3-k7 - 2.4.27-10sarge2\n\t\tlibsensors3 - 2.9.1-1sarge3\n\tsparc:\n\t\tkernel-image-2.4-sparc32 - 42sarge1\n\t\tkernel-image-2.4.27-3-sparc32-smp - 2.4.27-9sarge2\n\t\tkernel-image-2.4-sparc64-smp - 42sarge1\n\t\tkernel-image-2.4.27-3-sparc32 - 2.4.27-9sarge2\n\t\tkernel-headers-2.4.27-3-sparc64-smp - 2.4.27-9sarge2\n\t\tkernel-headers-2.4.27-3-sparc32 - 2.4.27-9sarge2\n\t\tkernel-headers-2.4.27-3-sparc64 - 2.4.27-9sarge2\n\t\tkernel-build-2.4.27-3 - 2.4.27-9sarge2\n\t\tkernel-image-2.4-sparc32-smp - 42sarge1\n\t\tkernel-headers-2.4-sparc32-smp - 42sarge1\n\t\tkernel-image-2.4.27-3-sparc64 - 2.4.27-9sarge2\n\t\tkernel-image-2.4.27-3-sparc64-smp - 2.4.27-9sarge2\n\t\tkernel-image-2.4-sparc64 - 42sarge1\n\t\tkernel-headers-2.4-sparc64 - 42sarge1\n\t\tkernel-headers-2.4.27-3-sparc32-smp - 2.4.27-9sarge2\n\t\tkernel-headers-2.4-sparc32 - 42sarge1\n\t\tkernel-headers-2.4-sparc64-smp - 42sarge1\n\t\tkernel-headers-2.4.27-3 - 2.4.27-9sarge2\n\talpha:\n\t\tkernel-headers-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-image-2.4-smp - 101sarge1\n\t\tkernel-image-2.4-generic - 101sarge1\n\t\tkernel-image-2.4.27-3-generic - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-generic - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-generic - 101sarge1\n\t\tkernel-build-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4-smp - 101sarge1\n\tia64:\n\t\tkernel-image-2.4.27-3-mckinley-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-itanium-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4-mckinley - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-itanium-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-mckinley-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4-itanium - 2.4.27-10sarge2\n\t\tkernel-build-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-itanium - 2.4.27-10sarge2\n\t\tkernel-image-2.4-mckinley-smp - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3 - 2.4.27-10sarge2\n\t\tkernel-image-2.4-itanium-smp - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-mckinley - 2.4.27-10sarge2\n\t\tkernel-headers-2.4.27-3-mckinley - 2.4.27-10sarge2\n\t\tkernel-image-2.4.27-3-itanium - 2.4.27-10sarge2\n\tmips:\n\t\tkernel-image-2.4.27-r5k-ip22 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r4k-ip22 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1\n\t\tmips-tools - 2.4.27-10.sarge2.040815-1\n\tnoarch:\n\t\tkernel-patch-debian-2.4.27 - 2.4.27-10sarge2\n\t\tlm-sensors-source - 2.9.1-1sarge3\n\t\tkernel-doc-2.4.27-speakup - 2.4.27-1.1sarge1\n\t\tsystemimager-boot-ia64-standard - 3.2.3-6sarge1\n\t\tsystemimager-boot-i386-standard - 3.2.3-6sarge1\n\t\ti2c-source - 2.9.1-1sarge1\n\t\tkernel-doc-2.4.27 - 2.4.27-10sarge2\n\t\tkernel-tree-2.4.27 - 2.4.27-10sarge2\n\t\tsystemimager-common - 3.2.3-6sarge1\n\t\tsystemimager-doc - 3.2.3-6sarge1\n\t\tkernel-patch-2.4-i2c - 2.9.1-1sarge1\n\t\tsystemimager-server - 3.2.3-6sarge1\n\t\tkernel-source-2.4.27 - 2.4.27-10sarge2\n\t\tsystemimager-client - 3.2.3-6sarge1\n\t\tsystemimager-server-flamethrowerd - 3.2.3-6sarge1\n\t\tkernel-patch-2.4-lm-sensors - 2.9.1-1sarge3\n\tmipsel:\n\t\tkernel-image-2.4.27-r5k-lasat - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r5k-cobalt - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-xxs1500 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r4k-kn04 - 2.4.27-10.sarge2.040815-1\n\t\tmips-tools - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-r3k-kn02 - 2.4.27-10.sarge2.040815-1\n\t\tkernel-image-2.4.27-sb1-swarm-bn - 2.4.27-10.sarge2.040815-1\n\t\tkernel-headers-2.4.27 - 2.4.27-10.sarge2.040815-1\n\tarm:\n\t\tkernel-headers-2.4.27 - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-riscpc - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-riscstation - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-netwinder - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-lart - 2.4.27-2sarge2\n\t\tkernel-build-2.4.27 - 2.4.27-2sarge2\n\t\tkernel-image-2.4.27-bast - 2.4.27-2sarg",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03254",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2004-0887, CVE-2004-1058, CVE-2004-2607, CVE-2005-0449, CVE-2005-1761, CVE-2005-2457, CVE-2005-2555, CVE-2005-2709, CVE-2005-2973, CVE-2005-3257, CVE-2005-3783, CVE-2005-3806, CVE-2005-3848, CVE-2005-3857, CVE-2005-3858, CVE-2005-4618, DSA-1018, ID:1401638",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 kernel-pcmcia-modules-2.4-586tsc \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438  \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1018/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1058\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2607\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0449\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3858\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2709\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2555\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2457\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3848\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3257\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3857\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4618\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3783\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3806\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2973\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0887\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1761",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2005-3783 (GCVE-0-2005-3783)

Vulnerability from cvelistv5 – Published: 2005-11-23 21:00 – Updated: 2024-08-07 23:24

Summary

The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash).

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
http://secunia.com/advisories/17917	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/git/?p=linux/kernel/git/gre…	x_refsource_CONFIRM
http://www.securityfocus.com/advisories/9806	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	x_refsource_MISC
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19607	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/419522/100…	vendor-advisoryx_refsource_SUSE
http://www.kernel.org/git/?p=linux/kernel/git/gre…	x_refsource_CONFIRM
http://secunia.com/advisories/17761	third-party-advisoryx_refsource_SECUNIA
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/17918	third-party-advisoryx_refsource_SECUNIA
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/15642	vdb-entryx_refsource_BID
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/17787	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-11-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.297Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "17917",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17917"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=blobdiff%3Bh=fcfc4568b45f3f190ba320b0d5853836921cb8bc%3Bhp=019e04ec065a55d8f28157d3a1f7ba06cafd347f%3Bhb=082d52c56f642d21b771a13221068d40915a1409%3Bf=kernel/ptrace.c"
          },
          {
            "name": "SUSE-SA:2005:067",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/9806"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174075"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "19607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19607"
          },
          {
            "name": "SUSE-SA:2005:068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=commit%3Bh=082d52c56f642d21b771a13221068d40915a1409"
          },
          {
            "name": "17761",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17761"
          },
          {
            "name": "20060402-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
          },
          {
            "name": "MDKSA-2006:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "17918",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17918"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.2"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "15642",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15642"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "17787",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17787"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "17917",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17917"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=blobdiff%3Bh=fcfc4568b45f3f190ba320b0d5853836921cb8bc%3Bhp=019e04ec065a55d8f28157d3a1f7ba06cafd347f%3Bhb=082d52c56f642d21b771a13221068d40915a1409%3Bf=kernel/ptrace.c"
        },
        {
          "name": "SUSE-SA:2005:067",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/advisories/9806"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174075"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "19607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19607"
        },
        {
          "name": "SUSE-SA:2005:068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=commit%3Bh=082d52c56f642d21b771a13221068d40915a1409"
        },
        {
          "name": "17761",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17761"
        },
        {
          "name": "20060402-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
        },
        {
          "name": "MDKSA-2006:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "17918",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17918"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.2"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "15642",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15642"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "17787",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17787"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3783",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "17917",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17917"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git;a=blobdiff;h=fcfc4568b45f3f190ba320b0d5853836921cb8bc;hp=019e04ec065a55d8f28157d3a1f7ba06cafd347f;hb=082d52c56f642d21b771a13221068d40915a1409;f=kernel/ptrace.c",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git;a=blobdiff;h=fcfc4568b45f3f190ba320b0d5853836921cb8bc;hp=019e04ec065a55d8f28157d3a1f7ba06cafd347f;hb=082d52c56f642d21b771a13221068d40915a1409;f=kernel/ptrace.c"
            },
            {
              "name": "SUSE-SA:2005:067",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/advisories/9806"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174075",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174075"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "19607",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19607"
            },
            {
              "name": "SUSE-SA:2005:068",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git;a=commit;h=082d52c56f642d21b771a13221068d40915a1409",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git;a=commit;h=082d52c56f642d21b771a13221068d40915a1409"
            },
            {
              "name": "17761",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17761"
            },
            {
              "name": "20060402-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
            },
            {
              "name": "MDKSA-2006:018",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "17918",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17918"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.2",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.2"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "15642",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15642"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "17787",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17787"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3783",
    "datePublished": "2005-11-23T21:00:00.000Z",
    "dateReserved": "2005-11-23T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.297Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3806 (GCVE-0-2005-3806)

Vulnerability from cvelistv5 – Published: 2005-11-25 21:00 – Updated: 2024-08-07 23:24

Summary

The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

28 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17917	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18684	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18977	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/advisories/9806	vendor-advisoryx_refsource_SUSE
http://kernel.org/git/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/archive/1/419522/100…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/archive/1/428058/100…	vendor-advisoryx_refsource_FEDORA
http://wwwnew.mandriva.com/security/advisories?na…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/427981/100…	vendor-advisoryx_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15729	vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/428028/100…	vendor-advisoryx_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://kernel.org/git/?p=linux/kernel/git/torvald…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/17918	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-10-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.194Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "17917",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17917"
          },
          {
            "name": "18684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18684"
          },
          {
            "name": "18977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18977"
          },
          {
            "name": "SUSE-SA:2005:067",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/9806"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "oval:org.mitre.oval:def:9903",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903"
          },
          {
            "name": "SUSE-SA:2005:068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
          },
          {
            "name": "FLSA:157459-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
          },
          {
            "name": "MDKSA-2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "RHSA-2006:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "15729",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15729"
          },
          {
            "name": "FLSA:157459-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
          },
          {
            "name": "MDKSA-2006:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "17918",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17918"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "RHSA-2006:0191",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "17917",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17917"
        },
        {
          "name": "18684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18684"
        },
        {
          "name": "18977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18977"
        },
        {
          "name": "SUSE-SA:2005:067",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/advisories/9806"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "oval:org.mitre.oval:def:9903",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903"
        },
        {
          "name": "SUSE-SA:2005:068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
        },
        {
          "name": "FLSA:157459-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
        },
        {
          "name": "MDKSA-2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "RHSA-2006:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "15729",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15729"
        },
        {
          "name": "FLSA:157459-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
        },
        {
          "name": "MDKSA-2006:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "17918",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17918"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "RHSA-2006:0191",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3806",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "17917",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17917"
            },
            {
              "name": "18684",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18684"
            },
            {
              "name": "18977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18977"
            },
            {
              "name": "SUSE-SA:2005:067",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/advisories/9806"
            },
            {
              "name": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "oval:org.mitre.oval:def:9903",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903"
            },
            {
              "name": "SUSE-SA:2005:068",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
            },
            {
              "name": "FLSA:157459-2",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
            },
            {
              "name": "MDKSA-2006:044",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
            },
            {
              "name": "FLSA:157459-4",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
            },
            {
              "name": "RHSA-2006:0190",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "15729",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15729"
            },
            {
              "name": "FLSA:157459-1",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
            },
            {
              "name": "MDKSA-2006:018",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
            },
            {
              "name": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=bbbe80cdaf72a75a463aff9551e60b31e2f69061;hp=f841bde30c18493a94fd5d522b84724a8eb82a4a;hb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d;f=net/ipv6/ip6_flowlabel.c",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=bbbe80cdaf72a75a463aff9551e60b31e2f69061;hp=f841bde30c18493a94fd5d522b84724a8eb82a4a;hb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d;f=net/ipv6/ip6_flowlabel.c"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "17918",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17918"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "RHSA-2006:0191",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3806",
    "datePublished": "2005-11-25T21:00:00.000Z",
    "dateReserved": "2005-11-25T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3848 (GCVE-0-2005-3848)

Vulnerability from cvelistv5 – Published: 2005-11-27 00:00 – Updated: 2024-08-07 23:24

Summary

Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

20 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=112431016816937&w=2	mailing-listx_refsource_MLIST
http://marc.info/?l=linux-kernel&m=112508479212728&w=2	mailing-listx_refsource_MLIST
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/16044	vdb-entryx_refsource_BID
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://www.kernel.org/git/?p=linux/kernel/git/chr…	x_refsource_CONFIRM
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=linux-kernel&m=112439084918917&w=2	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-08-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.535Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "name": "[linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112431016816937\u0026w=2"
          },
          {
            "name": "[linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112508479212728\u0026w=2"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "16044",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16044"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a"
          },
          {
            "name": "oval:org.mitre.oval:def:11346",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "[linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112439084918917\u0026w=2"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka \"DST leak in icmp_push_reply.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "name": "[linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112431016816937\u0026w=2"
        },
        {
          "name": "[linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112508479212728\u0026w=2"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "16044",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16044"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a"
        },
        {
          "name": "oval:org.mitre.oval:def:11346",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "[linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112439084918917\u0026w=2"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3848",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka \"DST leak in icmp_push_reply.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "19038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19038"
            },
            {
              "name": "[linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112431016816937\u0026w=2"
            },
            {
              "name": "[linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112508479212728\u0026w=2"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "16044",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16044"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cb94c62c252796f42bb83fe40960d12f3ea5a82a",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cb94c62c252796f42bb83fe40960d12f3ea5a82a"
            },
            {
              "name": "oval:org.mitre.oval:def:11346",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "SUSE-SA:2006:012",
              "refsource": "SUSE",
              "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=1cf41a8a8db3080c9a9243e77c5c447c8e694f87;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=1cf41a8a8db3080c9a9243e77c5c447c8e694f87;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "[linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112439084918917\u0026w=2"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3848",
    "datePublished": "2005-11-27T00:00:00.000Z",
    "dateReserved": "2005-11-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.535Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3857 (GCVE-0-2005-3857)

Vulnerability from cvelistv5 – Published: 2005-11-27 21:00 – Updated: 2024-08-07 23:24

Summary

The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

26 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	x_refsource_MISC
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_CONFIRM
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/19607	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/428058/100…	vendor-advisoryx_refsource_FEDORA
http://marc.info/?l=linux-kernel&m=113190437101622&w=2	mailing-listx_refsource_MLIST
http://www.securityfocus.com/archive/1/427981/100…	vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/428028/100…	vendor-advisoryx_refsource_FEDORA
http://marc.info/?l=linux-kernel&m=113175851920568&w=2	mailing-listx_refsource_MLIST
http://www.trustix.org/errata/2005/0070	vendor-advisoryx_refsource_TRUSTIX
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/15627	vdb-entryx_refsource_BID
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/17787	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17786	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2649	vdb-entryx_refsource_VUPEN

Date Public

2005-11-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.522Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "oval:org.mitre.oval:def:9727",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727"
          },
          {
            "name": "19607",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19607"
          },
          {
            "name": "FLSA:157459-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
          },
          {
            "name": "[linux-kernel] 20051113 [GIT] Fix memory leak in lease code",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113190437101622\u0026w=2"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "FLSA:157459-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
          },
          {
            "name": "[linux-kernel] 20051112 Re: local denial-of-service with file leases",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=113175851920568\u0026w=2"
          },
          {
            "name": "TSLSA-2005-0070",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2005/0070"
          },
          {
            "name": "20060402-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "15627",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15627"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "17787",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17787"
          },
          {
            "name": "17786",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17786"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          },
          {
            "name": "ADV-2005-2649",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2649"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed0175a462c4c30f6df6fac1cccac058f997739"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "oval:org.mitre.oval:def:9727",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727"
        },
        {
          "name": "19607",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19607"
        },
        {
          "name": "FLSA:157459-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
        },
        {
          "name": "[linux-kernel] 20051113 [GIT] Fix memory leak in lease code",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113190437101622\u0026w=2"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "FLSA:157459-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
        },
        {
          "name": "[linux-kernel] 20051112 Re: local denial-of-service with file leases",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=113175851920568\u0026w=2"
        },
        {
          "name": "TSLSA-2005-0070",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2005/0070"
        },
        {
          "name": "20060402-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "15627",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15627"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "17787",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17787"
        },
        {
          "name": "17786",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17786"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        },
        {
          "name": "ADV-2005-2649",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2649"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3857",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337"
            },
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ed0175a462c4c30f6df6fac1cccac058f997739",
              "refsource": "CONFIRM",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ed0175a462c4c30f6df6fac1cccac058f997739"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "oval:org.mitre.oval:def:9727",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9727"
            },
            {
              "name": "19607",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19607"
            },
            {
              "name": "FLSA:157459-2",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
            },
            {
              "name": "[linux-kernel] 20051113 [GIT] Fix memory leak in lease code",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113190437101622\u0026w=2"
            },
            {
              "name": "FLSA:157459-4",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "FLSA:157459-1",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
            },
            {
              "name": "[linux-kernel] 20051112 Re: local denial-of-service with file leases",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=113175851920568\u0026w=2"
            },
            {
              "name": "TSLSA-2005-0070",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2005/0070"
            },
            {
              "name": "20060402-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "15627",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15627"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "17787",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17787"
            },
            {
              "name": "17786",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17786"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            },
            {
              "name": "ADV-2005-2649",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2649"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3857",
    "datePublished": "2005-11-27T21:00:00.000Z",
    "dateReserved": "2005-11-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.522Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3858 (GCVE-0-2005-3858)

Vulnerability from cvelistv5 – Published: 2005-11-27 22:00 – Updated: 2024-08-07 23:24

Summary

Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/19038	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/16043	vdb-entryx_refsource_BID
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18203	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://marc.info/?l=linux-kernel&m=112533899509033&w=2	mailing-listx_refsource_MLIST
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/18510	third-party-advisoryx_refsource_SECUNIA
http://lists.suse.de/archive/suse-security-announ…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=linux-kernel&m=112508479120081&w=2	mailing-listx_refsource_MLIST
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA
https://usn.ubuntu.com/231-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18562	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-08-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.545Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "19038",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19038"
          },
          {
            "name": "16043",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16043"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "[linux-kernel] 20050829 Re: Linux 2.6.12.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112533899509033\u0026w=2"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "SUSE-SA:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
          },
          {
            "name": "[linux-kernel] 20050826 [PATCH 7/7] [IPV6]: Fix SKB leak in ip6_input_finish()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=112508479120081\u0026w=2"
          },
          {
            "name": "oval:org.mitre.oval:def:9396",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-08-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "19038",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19038"
        },
        {
          "name": "16043",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16043"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "[linux-kernel] 20050829 Re: Linux 2.6.12.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112533899509033\u0026w=2"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "SUSE-SA:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
        },
        {
          "name": "[linux-kernel] 20050826 [PATCH 7/7] [IPV6]: Fix SKB leak in ip6_input_finish()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=112508479120081\u0026w=2"
        },
        {
          "name": "oval:org.mitre.oval:def:9396",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3858",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the ip6_input_finish function in ip6_input.c in Linux kernel 2.6.12 and earlier might allow attackers to cause a denial of service via malformed IPv6 packets with unspecified parameter problems, which prevents the SKB from being freed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "19038",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19038"
            },
            {
              "name": "16043",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16043"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "[linux-kernel] 20050829 Re: Linux 2.6.12.6",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112533899509033\u0026w=2"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "SUSE-SA:2006:012",
              "refsource": "SUSE",
              "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html"
            },
            {
              "name": "[linux-kernel] 20050826 [PATCH 7/7] [IPV6]: Fix SKB leak in ip6_input_finish()",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-kernel\u0026m=112508479120081\u0026w=2"
            },
            {
              "name": "oval:org.mitre.oval:def:9396",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9396"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3858",
    "datePublished": "2005-11-27T22:00:00.000Z",
    "dateReserved": "2005-11-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-4618 (GCVE-0-2005-4618)

Vulnerability from cvelistv5 – Published: 2006-01-05 11:00 – Updated: 2024-08-07 23:53

Summary

Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

13 references

URL	Tags
http://www.kernel.org/git/?p=linux/kernel/git/tor…	x_refsource_MISC
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/19369	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1018	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/16141	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0035	vdb-entryx_refsource_VUPEN
http://www.kernel.org/pub/linux/kernel/v2.6/Chang…	x_refsource_MISC
http://secunia.com/advisories/18216	third-party-advisoryx_refsource_SECUNIA
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog…	x_refsource_MISC
http://www.debian.org/security/2006/dsa-1017	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/244-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/18527	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19374	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-12-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:53:27.796Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c"
          },
          {
            "name": "MDKSA-2006:040",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "16141",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16141"
          },
          {
            "name": "ADV-2006-0035",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0035"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
          },
          {
            "name": "18216",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18216"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "USN-244-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/244-1/"
          },
          {
            "name": "18527",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18527"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-12-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c"
        },
        {
          "name": "MDKSA-2006:040",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "16141",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16141"
        },
        {
          "name": "ADV-2006-0035",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0035"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
        },
        {
          "name": "18216",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18216"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "USN-244-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/244-1/"
        },
        {
          "name": "18527",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18527"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-4618",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer.  NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c",
              "refsource": "MISC",
              "url": "http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c"
            },
            {
              "name": "MDKSA-2006:040",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:040"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "16141",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16141"
            },
            {
              "name": "ADV-2006-0035",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0035"
            },
            {
              "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
              "refsource": "MISC",
              "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
            },
            {
              "name": "18216",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18216"
            },
            {
              "name": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15",
              "refsource": "MISC",
              "url": "http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "USN-244-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/244-1/"
            },
            {
              "name": "18527",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18527"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-4618",
    "datePublished": "2006-01-05T11:00:00.000Z",
    "dateReserved": "2006-01-05T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:53:27.796Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2015-03254 (CVE-2004-0887)

CVE-2005-3783 (GCVE-0-2005-3783)

CVE-2005-3806 (GCVE-0-2005-3806)

CVE-2005-3848 (GCVE-0-2005-3848)

CVE-2005-3857 (GCVE-0-2005-3857)

CVE-2005-3858 (GCVE-0-2005-3858)

CVE-2005-4618 (GCVE-0-2005-4618)

Tags

Sightings

Nomenclature

Related by attack behaviour