PT-2004-3690 · Linux+1 · Linux Kernel+1
Robert Derr
·
Publicado
1970-01-01
·
Atualizado
2024-01-26
·
CVE-2005-3181
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.13.4
Description
The issue is related to a memory leak in the audit system of the Linux kernel. When CONFIG AUDITSYSCALL is enabled, the kernel uses an incorrect function to free names cache memory, preventing it from being tracked by AUDITSYSCALL code. This leads to a memory leak, allowing attackers to cause a denial of service (memory consumption) by exploiting the vulnerability remotely.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat