PT-2005-4085 · Linux+1 · Linux Kernel+1

Publicado

2005-09-28

·

Atualizado

2018-10-19

·

CVE-2005-3273

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.12 Linux kernel versions 2.4 prior to 2.4.29
Description The issue arises from the rose rt ioctl function in rose route.c, which fails to properly verify the ndigis argument for a new route. This oversight allows attackers to trigger array out-of-bounds errors by specifying a large number of digipeats.
Recommendations For Linux kernel versions prior to 2.6.12, update to version 2.6.12 or later to resolve the issue. For Linux kernel versions 2.4 prior to 2.4.29, update to version 2.4.29 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2005-3273
DSA-922-1
RHSA-2005:663
RHSA-2005_663

Produtos afetados

Linux Kernel
Red Hat