CVE-2005-3273

2005-10-2100:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.018 Low

EPSS

Percentile

87.8%

JSON

The rose_rt_ioctl function in rose_route.c for Radionet Open Source
Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before
2.4.29, does not properly verify the ndigis argument for a new route, which
allows attackers to trigger array out-of-bounds errors with a large number
of digipeats.