Lucene search

[email protected]CVE-2005-3810

HistoryNov 25, 2005 - 9:03 p.m.

CVE-2005-3810

2005-11-2521:03:00

[email protected]

web.nvd.nist.gov

linux

kernel

denial of service

vulnerability

cve-2005-3810

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.4%

JSON

ip_conntrack_proto_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via a message without ICMP ID (ICMP_ID) information, which leads to a null dereference.

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.6.14

linuxlinux_kernelMatch2.6.14rc1

linuxlinux_kernelMatch2.6.14rc2

linuxlinux_kernelMatch2.6.14rc3

linuxlinux_kernelMatch2.6.14rc4

linuxlinux_kernelMatch2.6.14.1

linuxlinux_kernelMatch2.6.14.2

linuxlinux_kernelMatch2.6.14.3

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.6.14
linux:linux_kernellinux linux kerneleq2.6.14.1
linux:linux_kernellinux linux kerneleq2.6.14.2
linux:linux_kernellinux linux kerneleq2.6.14.3

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.6.14
linux:linux_kernel	linux linux kernel	eq	2.6.14.1
linux:linux_kernel	linux linux kernel	eq	2.6.14.2
linux:linux_kernel	linux linux kernel	eq	2.6.14.3

References

marc.info/?l=linux-kernel&m=113269476307795&w=2

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.4%

JSON

Related for CVE-2005-3810

cvelist1 nvd1 ubuntucve1