PT-2004-3690 · Linux+1 · Linux Kernel+1
Robert Derr
·
Published
1970-01-01
·
Updated
2024-01-26
·
CVE-2005-3181
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.13.4
Description
The issue is related to a memory leak in the audit system of the Linux kernel. When CONFIG AUDITSYSCALL is enabled, the kernel uses an incorrect function to free names cache memory, preventing it from being tracked by AUDITSYSCALL code. This leads to a memory leak, allowing attackers to cause a denial of service (memory consumption) by exploiting the vulnerability remotely.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat