PT-2005-1045 · Linux+1 · Linux Kernel+1

Published 2005-12-31 · Updated 2017-10-11 · CVE-2005-4798

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.4 up to 2.4.31 kernel-patch-2.4.27-s390 (affected versions not specified)

Description The issue is related to a buffer overflow in the NFS readlink handling in the Linux Kernel, which can be exploited by remote NFS servers to cause a denial of service (crash) via a long symlink. This is due to improper handling in nfs2xdr.c or nfs3xdr.c, leading to a crash in the NFS client. Additionally, there are multiple vulnerabilities in the kernel-patch-2.4.27-s390 package of the Debian GNU/Linux operating system that can be exploited remotely, potentially leading to disruption of protected information.

Recommendations For Linux Kernel versions 2.4 up to 2.4.31: update to a version that includes the fix for the buffer overflow in NFS readlink handling. For kernel-patch-2.4.27-s390: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03499

CVE-2005-4798

DSA-1183-1

DSA-1184-2

RHSA-2006:0144

Affected Products

Debian

Linux Kernel

References · 21

• https://bdu.fstec.ru/vul/2015-03499 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3745 · Security Note
• http://novell.com/linux/security/advisories/2006-05-31.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4535 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2444 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2935 · Security Note
• http://debian.org/security/2006/dsa-1183 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4798 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1528 · Security Note
• http://debian.org/security/2006/dsa-1184 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2446 · Security Note
• http://ussg.iu.edu/hypermail/linux/kernel/0509.1/1333.html · Note
• http://secunia.com/advisories/20398 · Note
• http://kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commitdiff%3Bh=87e03738fc15dc3ea4acde3a5dcb5f84b6b6152b · Note