PT-2005-3947 · Linux+1 · Linux Kernel+1
CVE-2005-3119
·
Published
2005-10-11
·
Updated
2024-02-02
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 2.6.10 through 2.6.13
Description
The issue is related to a memory leak in the
request key auth destroy function within the request key auth component of the Linux kernel. This leak allows local users to cause a denial of service by consuming memory through the creation of a large number of authorization token keys.Recommendations
For Linux kernel versions 2.6.10 through 2.6.13, consider updating to a version outside of this range to resolve the issue. As a temporary workaround, restrict the creation of authorization token keys to minimize the risk of exploitation.
Fix
DoS
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat