2.1

CVE-2005-3181

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.0 <= 2.6.13.3
Canonical ≫ Ubuntu Linux Version4.10
Canonical ≫ Ubuntu Linux Version5.04
Debian ≫ Debian Linux Version3.1
Mandriva ≫ Linux Version10.1
Mandriva ≫ Linux Version10.2
Mandriva ≫ Linux Version2006.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.387
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

http://www.securityfocus.com/archive/1/427980/100/0/threaded
Third Party Advisory
Broken Link
VDB Entry
http://secunia.com/advisories/17826
Vendor Advisory
Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
Third Party Advisory
http://secunia.com/advisories/19374
Vendor Advisory
Broken Link
http://www.debian.org/security/2006/dsa-1017
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235
Third Party Advisory
http://secunia.com/advisories/17917
Vendor Advisory
Broken Link
http://www.securityfocus.com/advisories/9806
Third Party Advisory
Broken Link
VDB Entry
http://secunia.com/advisories/17364
Vendor Advisory
Broken Link
http://www.redhat.com/support/errata/RHSA-2005-808.html
Broken Link
http://www.ubuntu.com/usn/usn-199-1
Third Party Advisory
http://secunia.com/advisories/17114
Vendor Advisory
Broken Link
http://www.securityfocus.com/bid/15076
Third Party Advisory
Broken Link
VDB Entry
http://secunia.com/advisories/17280
Vendor Advisory
Broken Link
http://www.securityfocus.com/advisories/9549
Third Party Advisory
Broken Link
VDB Entry
http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=829841146878e082613a49581ae252c071057c23
Broken Link
http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467
Broken Link