CVE-2005-3181 The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from b...
LowCVSS 2.1
EPSS 0.50%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | >= 2.6.0, <= 2.6.13.3 | No fix listed |
| Canonical Ubuntu Linux | = 4.10 | No fix listed |
| Canonical Ubuntu Linux | = 5.04 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| mandriva linux | = 10.1 | No fix listed |
| mandriva linux | = 10.2 | No fix listed |
| mandriva linux | = 2006.0 | No fix listed |
References
- kernel.org broken-link
- linux.bkbits.net broken-link
- 17114 broken-link third-party-advisory vendor-advisory
- 17280 broken-link third-party-advisory vendor-advisory
- 17364 broken-link third-party-advisory vendor-advisory
- 17826 broken-link third-party-advisory vendor-advisory
- 17917 broken-link third-party-advisory vendor-advisory
- 19374 broken-link third-party-advisory vendor-advisory
- DSA-1017 third-party-advisory vendor-advisory
- MDKSA-2005:218 third-party-advisory vendor-advisory
- MDKSA-2005:219 third-party-advisory vendor-advisory
- MDKSA-2005:220 third-party-advisory vendor-advisory
- MDKSA-2005:235 third-party-advisory vendor-advisory
- RHSA-2005:808 broken-link vendor-advisory
- FEDORA-2005-1007 broken-link third-party-advisory vdb-entry vendor-advisory
- SUSE-SA:2005:067 broken-link third-party-advisory vdb-entry vendor-advisory
- FLSA:157459-3 broken-link third-party-advisory vdb-entry vendor-advisory
- 15076 broken-link third-party-advisory vdb-entry
- USN-199-1 third-party-advisory vendor-advisory
- oval:org.mitre.oval:def:9467 broken-link signature vdb-entry