PT-2004-3677 · Debian+1 · Debian+1
Ollie Wild
·
Published
1970-01-01
·
Updated
2018-10-03
·
CVE-2005-3848
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Debian GNU/Linux kernel versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux kernel-image versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux kernel-headers versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux kernel-pcmcia-modules versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux kernel-build versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux lm-sensors versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux i2c versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux hostap-modules versions prior to 2.6.12.6 and 2.6.13
Debian GNU/Linux pcmcia-modules versions prior to 2.6.12.6 and 2.6.13
Description
The issue is related to multiple vulnerabilities in the Debian GNU/Linux operating system, specifically in the kernel and related packages. These vulnerabilities can be exploited remotely, potentially leading to a denial of service, violation of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited by sending a large number of crafted packets, causing the ip append data function to fail, resulting in a memory leak.
Recommendations
To resolve the issue, update the kernel and related packages to versions 2.6.12.6 or 2.6.13 or later.
As a temporary workaround, consider disabling the
icmp push reply function until a patch is available.
Restrict access to the vulnerable kernel modules to minimize the risk of exploitation.
Avoid using the vulnerable kernel versions until the issue is resolved.
Apply the necessary configuration changes and workarounds to mitigate the risk of exploitation.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Red Hat