Lucene search

[email protected]NVD:CVE-2005-3275

HistoryOct 21, 2005 - 1:02 a.m.

CVE-2005-3275

2005-10-2101:02:00

[email protected]

web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.3%

JSON

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.4.0test1

linuxlinux_kernelMatch2.4.0test10

linuxlinux_kernelMatch2.4.0test11

linuxlinux_kernelMatch2.4.0test12

linuxlinux_kernelMatch2.4.0test2

linuxlinux_kernelMatch2.4.0test3

linuxlinux_kernelMatch2.4.0test4

linuxlinux_kernelMatch2.4.0test5

linuxlinux_kernelMatch2.4.0test6

linuxlinux_kernelMatch2.4.0test7

linuxlinux_kernelMatch2.4.0test8

linuxlinux_kernelMatch2.4.0test9

linuxlinux_kernelMatch2.4.18x86

linuxlinux_kernelMatch2.4.18pre1

linuxlinux_kernelMatch2.4.18pre2

linuxlinux_kernelMatch2.4.18pre3

linuxlinux_kernelMatch2.4.18pre4

linuxlinux_kernelMatch2.4.18pre5

linuxlinux_kernelMatch2.4.18pre6

linuxlinux_kernelMatch2.4.18pre7

linuxlinux_kernelMatch2.4.18pre8

linuxlinux_kernelMatch2.4.19pre1

linuxlinux_kernelMatch2.4.19pre2

linuxlinux_kernelMatch2.4.19pre3

linuxlinux_kernelMatch2.4.19pre4

linuxlinux_kernelMatch2.4.19pre5

linuxlinux_kernelMatch2.4.19pre6

linuxlinux_kernelMatch2.4.21pre1

linuxlinux_kernelMatch2.4.21pre4

linuxlinux_kernelMatch2.4.21pre7

linuxlinux_kernelMatch2.4.22

linuxlinux_kernelMatch2.4.22pre10

linuxlinux_kernelMatch2.4.23

linuxlinux_kernelMatch2.4.23pre9

linuxlinux_kernelMatch2.4.23_ow2

linuxlinux_kernelMatch2.4.24

linuxlinux_kernelMatch2.4.24_ow1

linuxlinux_kernelMatch2.4.25

linuxlinux_kernelMatch2.4.26

linuxlinux_kernelMatch2.4.27

linuxlinux_kernelMatch2.4.27pre1

linuxlinux_kernelMatch2.4.27pre2

linuxlinux_kernelMatch2.4.27pre3

linuxlinux_kernelMatch2.4.27pre4

linuxlinux_kernelMatch2.4.27pre5

linuxlinux_kernelMatch2.4.28

linuxlinux_kernelMatch2.4.29

linuxlinux_kernelMatch2.4.29rc1

linuxlinux_kernelMatch2.4.29rc2

linuxlinux_kernelMatch2.4.30

linuxlinux_kernelMatch2.4.30rc2

linuxlinux_kernelMatch2.4.30rc3

linuxlinux_kernelMatch2.4.31pre1

linuxlinux_kernelMatch2.6.0

linuxlinux_kernelMatch2.6.1

linuxlinux_kernelMatch2.6.1rc1

linuxlinux_kernelMatch2.6.1rc2

linuxlinux_kernelMatch2.6.2

linuxlinux_kernelMatch2.6.3

linuxlinux_kernelMatch2.6.4

linuxlinux_kernelMatch2.6.5

linuxlinux_kernelMatch2.6.6

linuxlinux_kernelMatch2.6.6rc1

linuxlinux_kernelMatch2.6.7

linuxlinux_kernelMatch2.6.7rc1

linuxlinux_kernelMatch2.6.8

linuxlinux_kernelMatch2.6.8rc1

linuxlinux_kernelMatch2.6.8rc2

linuxlinux_kernelMatch2.6.8rc3

linuxlinux_kernelMatch2.6.8.1

linuxlinux_kernelMatch2.6.8.1.5

linuxlinux_kernelMatch2.6.8.1.5386

linuxlinux_kernelMatch2.6.8.1.5686

linuxlinux_kernelMatch2.6.8.1.5686_smp

linuxlinux_kernelMatch2.6.8.1.5amd64

linuxlinux_kernelMatch2.6.8.1.5amd64_k8

linuxlinux_kernelMatch2.6.8.1.5amd64_k8_smp

linuxlinux_kernelMatch2.6.8.1.5amd64_xeon

linuxlinux_kernelMatch2.6.8.1.5k7

linuxlinux_kernelMatch2.6.8.1.5k7_smp

linuxlinux_kernelMatch2.6.8.1.5power3

linuxlinux_kernelMatch2.6.8.1.5power3_smp

linuxlinux_kernelMatch2.6.8.1.5power4

linuxlinux_kernelMatch2.6.8.1.5power4_smp

linuxlinux_kernelMatch2.6.8.1.5powerpc

linuxlinux_kernelMatch2.6.8.1.5powerpc_smp

linuxlinux_kernelMatch2.6.92.6.20

linuxlinux_kernelMatch2.6.10

linuxlinux_kernelMatch2.6.10rc2

linuxlinux_kernelMatch2.6.11

linuxlinux_kernelMatch2.6.11rc1

linuxlinux_kernelMatch2.6.11rc2

linuxlinux_kernelMatch2.6.11rc3

linuxlinux_kernelMatch2.6.11rc4

linuxlinux_kernelMatch2.6.11.1

linuxlinux_kernelMatch2.6.11.2

linuxlinux_kernelMatch2.6.11.3

linuxlinux_kernelMatch2.6.11.4

linuxlinux_kernelMatch2.6.11.5

linuxlinux_kernelMatch2.6.11.6

linuxlinux_kernelMatch2.6.11.7

linuxlinux_kernelMatch2.6.11.8

linuxlinux_kernelMatch2.6.11.9

linuxlinux_kernelMatch2.6.11.10

linuxlinux_kernelMatch2.6.11.11

linuxlinux_kernelMatch2.6.11.12

linuxlinux_kernelMatch2.6.11_rc1_bk6

linuxlinux_kernelMatch2.6.12

linuxlinux_kernelMatch2.6.12rc1

linuxlinux_kernelMatch2.6.12rc4

linuxlinux_kernelMatch2.6.12rc5

linuxlinux_kernelMatch2.6.12.1

linuxlinux_kernelMatch2.6.12.2

linuxlinux_kernelMatch2.6.12.3

linuxlinux_kernelMatch2.6.12.4

linuxlinux_kernelMatch2.6.12.5

linuxlinux_kernelMatch2.6.12.6

References

ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U

linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA

secunia.com/advisories/17826

secunia.com/advisories/17918

secunia.com/advisories/18056

secunia.com/advisories/18059

secunia.com/advisories/18562

secunia.com/advisories/18684

secunia.com/advisories/18977

secunia.com/advisories/19185

secunia.com/advisories/19607

www.debian.org/security/2005/dsa-921

www.debian.org/security/2005/dsa-922

www.mandriva.com/security/advisories?name=MDKSA-2005:218

www.mandriva.com/security/advisories?name=MDKSA-2005:219

www.mandriva.com/security/advisories?name=MDKSA-2005:220

www.redhat.com/support/errata/RHSA-2006-0140.html

www.redhat.com/support/errata/RHSA-2006-0190.html

www.redhat.com/support/errata/RHSA-2006-0191.html

www.securityfocus.com/archive/1/419522/100/0/threaded

www.securityfocus.com/archive/1/427980/100/0/threaded

www.securityfocus.com/archive/1/428028/100/0/threaded

www.securityfocus.com/archive/1/428058/100/0/threaded

www.securityfocus.com/bid/15531

wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142

usn.ubuntu.com/219-1/

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.055 Low

EPSS

Percentile

93.3%

JSON

Related for NVD:CVE-2005-3275

cve1 cvelist1 ubuntucve1 ubuntu1 nessus10 redhat4 openvas6 debian4 centos3 osv2 securityvulns3 suse1