Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.6
CVSSv2

CVE-2005-3275

Published: 21/10/2005 Updated: 07/11/2023
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Subscribe to Linux

Vulnerability Summary

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 prior to 2.6.13 and 2.4 prior to 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote malicious users to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.11

linux linux kernel 2.6.8.1.5

linux linux kernel 2.4.18

linux linux kernel 2.4.30

linux linux kernel 2.6.12

linux linux kernel 2.4.0

linux linux kernel 2.6.11.2

linux linux kernel 2.6.5

linux linux kernel 2.6.11.10

linux linux kernel 2.6.1

linux linux kernel 2.4.27

linux linux kernel 2.6.11.8

linux linux kernel 2.4.26

linux linux kernel 2.6.11_rc1_bk6

linux linux kernel 2.4.19

linux linux kernel 2.4.21

linux linux kernel 2.6.10

linux linux kernel 2.6.11.6

linux linux kernel 2.6.11.11

linux linux kernel 2.6.3

linux linux kernel 2.6.4

linux linux kernel 2.6.11.5

linux linux kernel 2.6.7

linux linux kernel 2.4.23_ow2

linux linux kernel 2.4.22

linux linux kernel 2.4.23

linux linux kernel 2.4.29

linux linux kernel 2.6.2

linux linux kernel 2.6.8

linux linux kernel 2.4.25

linux linux kernel 2.4.24

linux linux kernel 2.6.12.5

linux linux kernel 2.4.31

linux linux kernel 2.6.12.1

linux linux kernel 2.6.11.9

linux linux kernel 2.4.28

linux linux kernel 2.6.0

linux linux kernel 2.4.24_ow1

linux linux kernel 2.6.12.2

linux linux kernel 2.6.12.4

linux linux kernel 2.6.11.3

linux linux kernel 2.6.12.3

linux linux kernel 2.6.6

linux linux kernel 2.6.9

linux linux kernel 2.6.12.6

linux linux kernel 2.6.11.7

linux linux kernel 2.6.8.1

linux linux kernel 2.6.11.4

linux linux kernel 2.6.11.12

linux linux kernel 2.6.11.1

Vendor Advisories

Red Hat: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 2
Synopsis Updated kernel packages available for Red Hat Enterprise Linux 4 Update 2 Type/Severity Security Advisory: Important Topic Updated kernel packages are now available as part of ongoing supportand maintenance of Red Hat Enterprise Linux version 4 This is thesecond regular updateThis update has bee ...
Ubuntu Security Notice: linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities
The problem can be corrected by updating your system to the following package versions: ...
Debian Security Advisories: DSA-921-1 kernel-source-2.4.27 -- several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-0756 Alexander Nyberg discovered that the ptrace() system call does not properly verify addre ...
Debian Security Advisories: DSA-922-1 kernel-source-2.6.8 -- several vulnerabilities
Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2004-2302 A race condition in the sysfs filesystem allows local users to read kernel memory and ca ...

References

NVD-CWE-Otherhttp://www.debian.org/security/2005/dsa-922http://www.securityfocus.com/bid/15531http://www.debian.org/security/2005/dsa-921http://secunia.com/advisories/17918http://secunia.com/advisories/18056http://secunia.com/advisories/18059http://www.redhat.com/support/errata/RHSA-2006-0140.htmlhttp://secunia.com/advisories/18562http://www.redhat.com/support/errata/RHSA-2006-0190.htmlhttp://www.redhat.com/support/errata/RHSA-2006-0191.htmlhttp://secunia.com/advisories/18684http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044http://secunia.com/advisories/18977http://secunia.com/advisories/17826http://secunia.com/advisories/19185ftp://patches.sgi.com/support/free/security/advisories/20060402-01-Uhttp://secunia.com/advisories/19607http://www.mandriva.com/security/advisories?name=MDKSA-2005:218http://www.mandriva.com/security/advisories?name=MDKSA-2005:220http://www.mandriva.com/security/advisories?name=MDKSA-2005:219https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142https://usn.ubuntu.com/219-1/http://www.securityfocus.com/archive/1/428058/100/0/threadedhttp://www.securityfocus.com/archive/1/428028/100/0/threadedhttp://www.securityfocus.com/archive/1/427980/100/0/threadedhttp://www.securityfocus.com/archive/1/419522/100/0/threadedhttp://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApAhttps://access.redhat.com/errata/RHSA-2005:514https://usn.ubuntu.com/219-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook