PT-2005-3947 · Linux+1 · Linux Kernel+1

Published

2005-10-11

·

Updated

2024-02-02

·

CVE-2005-3119

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.10 through 2.6.13
Description The issue is related to a memory leak in the request key auth destroy function within the request key auth component of the Linux kernel. This leak allows local users to cause a denial of service by consuming memory through the creation of a large number of authorization token keys.
Recommendations For Linux kernel versions 2.6.10 through 2.6.13, consider updating to a version outside of this range to resolve the issue. As a temporary workaround, restrict the creation of authorization token keys to minimize the risk of exploitation.

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2005-3119
RHSA-2005:808
RHSA-2005_808

Affected Products

Linux Kernel
Red Hat