Lucene search
HistoryJan 09, 2006 - 11:00 a.m.
CVE-2005-4635
linux
kernel
nl_fib_input
denial of service
nvd
cve-2005-4635
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.024 Low
EPSS
Percentile
90.0%
The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the header and payload, which allows remote attackers to cause a denial of service (invalid memory reference) via malformed fib_lookup netlink messages.
Affected configurations
Node
linuxlinux_kernelMatch2.0
ORlinuxlinux_kernelMatch2.0.9.9
ORlinuxlinux_kernelMatch2.1
ORlinuxlinux_kernelMatch2.2.0
ORlinuxlinux_kernelMatch2.2.15pre16
ORlinuxlinux_kernelMatch2.2.15_pre20
ORlinuxlinux_kernelMatch2.2.16pre6
ORlinuxlinux_kernelMatch2.2.25
ORlinuxlinux_kernelMatch2.2.27rc2
ORlinuxlinux_kernelMatch2.3.0
ORlinuxlinux_kernelMatch2.3.99pre1
ORlinuxlinux_kernelMatch2.3.99pre2
ORlinuxlinux_kernelMatch2.3.99pre3
ORlinuxlinux_kernelMatch2.3.99pre4
ORlinuxlinux_kernelMatch2.3.99pre5
ORlinuxlinux_kernelMatch2.3.99pre6
ORlinuxlinux_kernelMatch2.3.99pre7
ORlinuxlinux_kernelMatch2.4.0test10
ORlinuxlinux_kernelMatch2.4.0test11
ORlinuxlinux_kernelMatch2.4.0test12
ORlinuxlinux_kernelMatch2.4.0test2
ORlinuxlinux_kernelMatch2.4.0test3
ORlinuxlinux_kernelMatch2.4.0test4
ORlinuxlinux_kernelMatch2.4.0test5
ORlinuxlinux_kernelMatch2.4.0test6
ORlinuxlinux_kernelMatch2.4.0test7
ORlinuxlinux_kernelMatch2.4.0test8
ORlinuxlinux_kernelMatch2.4.0test9
ORlinuxlinux_kernelMatch2.4.18x86
ORlinuxlinux_kernelMatch2.4.18pre1
ORlinuxlinux_kernelMatch2.4.18pre2
ORlinuxlinux_kernelMatch2.4.18pre3
ORlinuxlinux_kernelMatch2.4.18pre4
ORlinuxlinux_kernelMatch2.4.18pre5
ORlinuxlinux_kernelMatch2.4.18pre6
ORlinuxlinux_kernelMatch2.4.18pre7
ORlinuxlinux_kernelMatch2.4.18pre8
ORlinuxlinux_kernelMatch2.4.19pre1
ORlinuxlinux_kernelMatch2.4.19pre2
ORlinuxlinux_kernelMatch2.4.19pre3
ORlinuxlinux_kernelMatch2.4.19pre4
ORlinuxlinux_kernelMatch2.4.19pre5
ORlinuxlinux_kernelMatch2.4.19pre6
ORlinuxlinux_kernelMatch2.4.21pre1
ORlinuxlinux_kernelMatch2.4.21pre4
ORlinuxlinux_kernelMatch2.4.21pre7
ORlinuxlinux_kernelMatch2.4.22pre10
ORlinuxlinux_kernelMatch2.4.23
ORlinuxlinux_kernelMatch2.4.23pre9
ORlinuxlinux_kernelMatch2.4.23_ow2
ORlinuxlinux_kernelMatch2.4.24
ORlinuxlinux_kernelMatch2.4.24_ow1
ORlinuxlinux_kernelMatch2.4.25
ORlinuxlinux_kernelMatch2.4.26
ORlinuxlinux_kernelMatch2.4.27
ORlinuxlinux_kernelMatch2.4.27pre1
ORlinuxlinux_kernelMatch2.4.27pre2
ORlinuxlinux_kernelMatch2.4.27pre3
ORlinuxlinux_kernelMatch2.4.27pre4
ORlinuxlinux_kernelMatch2.4.27pre5
ORlinuxlinux_kernelMatch2.4.28
ORlinuxlinux_kernelMatch2.4.29
ORlinuxlinux_kernelMatch2.4.29rc1
ORlinuxlinux_kernelMatch2.4.29rc2
ORlinuxlinux_kernelMatch2.4.30
ORlinuxlinux_kernelMatch2.4.30rc2
ORlinuxlinux_kernelMatch2.4.30rc3
ORlinuxlinux_kernelMatch2.4.31
ORlinuxlinux_kernelMatch2.4.31pre1
ORlinuxlinux_kernelMatch2.4.32pre1
ORlinuxlinux_kernelMatch2.4.32pre2
ORlinuxlinux_kernelMatch2.5.0
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.064-bit_x86
ORlinuxlinux_kernelMatch2.6.0itanium_ia64_montecito
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test10
ORlinuxlinux_kernelMatch2.6.0test11
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.6rc1
ORlinuxlinux_kernelMatch2.6.7
ORlinuxlinux_kernelMatch2.6.7rc1
ORlinuxlinux_kernelMatch2.6.8
ORlinuxlinux_kernelMatch2.6.8rc1
ORlinuxlinux_kernelMatch2.6.8rc2
ORlinuxlinux_kernelMatch2.6.8rc3
ORlinuxlinux_kernelMatch2.6.8.1
ORlinuxlinux_kernelMatch2.6.8.1.5
ORlinuxlinux_kernelMatch2.6.8.1.5386
ORlinuxlinux_kernelMatch2.6.8.1.5686
ORlinuxlinux_kernelMatch2.6.8.1.5686_smp
ORlinuxlinux_kernelMatch2.6.8.1.5amd64
ORlinuxlinux_kernelMatch2.6.8.1.5amd64_k8
ORlinuxlinux_kernelMatch2.6.8.1.5amd64_k8_smp
ORlinuxlinux_kernelMatch2.6.8.1.5amd64_xeon
ORlinuxlinux_kernelMatch2.6.8.1.5k7
ORlinuxlinux_kernelMatch2.6.8.1.5k7_smp
ORlinuxlinux_kernelMatch2.6.8.1.5power3
ORlinuxlinux_kernelMatch2.6.8.1.5power3_smp
ORlinuxlinux_kernelMatch2.6.8.1.5power4
ORlinuxlinux_kernelMatch2.6.8.1.5power4_smp
ORlinuxlinux_kernelMatch2.6.8.1.5powerpc
ORlinuxlinux_kernelMatch2.6.8.1.5powerpc_smp
ORlinuxlinux_kernelMatch2.6.92.6.20
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.10rc2
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11rc1
ORlinuxlinux_kernelMatch2.6.11rc2
ORlinuxlinux_kernelMatch2.6.11rc3
ORlinuxlinux_kernelMatch2.6.11rc4
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.11_rc1_bk6
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12rc1
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13rc1
ORlinuxlinux_kernelMatch2.6.13rc4
ORlinuxlinux_kernelMatch2.6.13rc6
ORlinuxlinux_kernelMatch2.6.13rc7
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15rc1
ORlinuxlinux_kernelMatch2.6.15rc3
ORlinuxlinux_kernelMatch2.6.15rc4
ORlinuxlinux_kernelMatch2.6.15rc5
ORlinuxlinux_kernelMatch2.6.15rc6
ORlinuxlinux_kernelMatch2.6.15rc7
ORlinuxlinux_kernelMatch2.6_test9_cvs
References
secunia.com/advisories/18216
secunia.com/advisories/18788
www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ea86575eaf99a9262a969309d934318028dbfacb
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15
www.novell.com/linux/security/advisories/2006_06_kernel.html
www.securityfocus.com/bid/16139
www.vupen.com/english/advisories/2006/0035
Social References
More
Related
cvelist
cvelist
CVE-2005-4635
2006-01-09 11:00:00
ubuntucve
ubuntucve
CVE-2005-4635
2005-12-31 00:00:00
nvd
nvd
CVE-2005-4635
2005-12-31 05:00:00
nessus
nessus
SUSE-SA:2006:006: kernel
2006-02-10 00:00:00
suse
suse
remote denial of service in kernel
2006-02-09 16:09:43
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.024 Low
EPSS
Percentile
90.0%
Related for CVE-2005-4635