CVE-2005-3809

The CVE-2005-3809 vulnerability affects the Linux kernel (2.6.14 up to 2.6.14.3) in nfattr_to_tcp (ip_conntrack_proto_tcp.c) within ctnetlink. The issue allows an attacker to cause a denial-of-service (kernel oops) by sending an update message without private protocol information, triggering a nu...

CVE-2005-3809

The nfattrtotcp function in ipconntrackprototcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service kernel oops via an update message without private protocol information, which triggers a null dereference...

CVE-2005-3810

ipconntrackprotoicmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service kernel oops via a message without ICMP ID ICMPID information, which leads to a null dereference...

CVE-2005-3732

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service null dereference and crash via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for...

CVE-2005-3732

The Internet Key Exchange version 1 IKEv1 implementation isakmpagg.c in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service null dereference and crash via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for...

CVE-2005-3732

CVE-2005-3732 affects the IKEv1 racoon implementation in ipsec-tools (isakmp_agg.c) prior to version 0.6.3, when running in aggressive mode. A remote attacker can trigger a denial-of-service via a crafted IKE packet that dereferences a NULL pointer. Public advisories from Red Hat/CentOS (RHSA-200...

CVE-2005-3732

Removed by vendor...

CVE-2005-2755

Apple QuickTime Player before 7.0.3 allows user-assisted attackers to cause a denial of service crash via a crafted file with a missing movie attribute, which leads to a null dereference...

CVE-2005-3492

FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service crash by sending an NTCONNOK command from a client that is not connected, which triggers a null dereference...

DEBIAN-CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-3492

CVE-2005-3492 affects FlatFrag 0.3 and earlier. The issue is a denial of service caused by a remote attacker sending an NT_CONN_OK command from a client that is not connected, triggering a null dereference. The documented impact is a crash. The Connected documents do not provide additional exploi...

CVE-2005-3492

FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service crash by sending an NTCONNOK command from a client that is not connected, which triggers a null dereference...

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

DEBIAN-CVE-2005-3409

OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service segmentation fault by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler...

CVE-2005-3409

OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service segmentation fault by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler...

security flaw

Ethereal 0.10.12 and earlier allows remote attackers to cause a denial of service null dereference via unknown vectors in the 1 SCSI, 2 sFlow, or 3 RTnet dissectors...

PT-2005-4060 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.10.12 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically a null dereference, via unknown vectors in the 1 SCSI, 2 sFlow, or 3 RTnet dissectors. Recommendations: For Ethere...

CVE-2005-3274

CVE-2005-3274 is a race condition in the Linux kernel’s SMP path for ip_vs_conn_flush, where a connection timer can expire while the connection table is being flushed before the correct lock is held. Affects Linux 2.6.x (before 2.6.13) and 2.4.x (before 2.4.32-pre2). Local users could trigger a n...