CVE-2005-3181
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/10/2005
Last modified:
03/04/2025
Description
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
Impact
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 2.6.0 (including) | 2.6.13.3 (including) |
cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:* | ||
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:mandriva:linux:10.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:mandriva:linux:10.2:*:*:*:*:*:*:* | ||
cpe:2.3:o:mandriva:linux:2006.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba%3Dcommitdiff%3Bh%3D829841146878e082613a49581ae252c071057c23
- http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA
- http://secunia.com/advisories/17114
- http://secunia.com/advisories/17280
- http://secunia.com/advisories/17364
- http://secunia.com/advisories/17826
- http://secunia.com/advisories/17917
- http://secunia.com/advisories/19374
- http://www.debian.org/security/2006/dsa-1017
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A218
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A219
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A220
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A235
- http://www.redhat.com/support/errata/RHSA-2005-808.html
- http://www.securityfocus.com/advisories/9549
- http://www.securityfocus.com/advisories/9806
- http://www.securityfocus.com/archive/1/427980/100/0/threaded
- http://www.securityfocus.com/bid/15076
- http://www.ubuntu.com/usn/usn-199-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467
- http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba%3Dcommitdiff%3Bh%3D829841146878e082613a49581ae252c071057c23
- http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA
- http://secunia.com/advisories/17114
- http://secunia.com/advisories/17280
- http://secunia.com/advisories/17364
- http://secunia.com/advisories/17826
- http://secunia.com/advisories/17917
- http://secunia.com/advisories/19374
- http://www.debian.org/security/2006/dsa-1017
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A218
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A219
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A220
- http://www.mandriva.com/security/advisories?name=MDKSA-2005%3A235
- http://www.redhat.com/support/errata/RHSA-2005-808.html
- http://www.securityfocus.com/advisories/9549
- http://www.securityfocus.com/advisories/9806
- http://www.securityfocus.com/archive/1/427980/100/0/threaded
- http://www.securityfocus.com/bid/15076
- http://www.ubuntu.com/usn/usn-199-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467