CVE-2005-3181

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/10/2005
Last modified:
03/04/2025

Description

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 2.6.0 (including) 2.6.13.3 (including)
cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
cpe:2.3:o:mandriva:linux:10.1:*:*:*:*:*:*:*
cpe:2.3:o:mandriva:linux:10.2:*:*:*:*:*:*:*
cpe:2.3:o:mandriva:linux:2006.0:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools