PT-2005-3737 · Linux · Linux Kernel

Published 2005-09-09 · Updated 2017-10-11 · CVE-2005-2873

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.13

Description The issue is related to the ipt recent kernel module in the Linux kernel, which does not properly perform time tests when the jiffies value exceeds LONG MAX. This can cause ipt recent netfilter rules to block too early.

Recommendations For Linux kernel versions prior to 2.6.13, update to version 2.6.13 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2873

Affected Products

Linux Kernel

References · 9

• http://mandriva.com/security/advisories?name=MDKSA-2005:235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2873 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2005:220 · Vendor Advisory
• http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:219 · Vendor Advisory
• http://rhn.redhat.com/errata/RHBA-2007-0304.html · Vendor Advisory
• http://secunia.com/advisories/17826 · Note
• http://securityfocus.com/bid/14791 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9838 · Note