Lucene search
HistoryNov 25, 2005 - 9:03 p.m.
CVE-2005-3809
nfattr_to_tcp
ip_conntrack_proto_tcp.c
ctnetlink
linux kernel
denial of service
null dereference
cve-2005-3809
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.2%
The nfattr_to_tcp function in ip_conntrack_proto_tcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via an update message without private protocol information, which triggers a null dereference.
Affected configurations
Node
linuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
Related
nvd
nvd
CVE-2005-3809
2005-11-25 21:03:00
ubuntucve
ubuntucve
CVE-2005-3809
2005-11-25 00:00:00
cvelist
cvelist
CVE-2005-3809
2005-11-25 21:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.4 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.2%
Related for CVE-2005-3809