cvelistv5 - cve-2005-3806

CVE-2005-3806 (GCVE-0-2005-3806)

Vulnerability from cvelistv5

Published

2005-11-25 21:00

Modified

2024-08-07 23:24

Severity ?

CWE

Summary

The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.

References

URL

Tags

	http://www.redhat.com/support/errata/RHSA-2006-0140.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/17917	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18684	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18977	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/advisories/9806	vendor-advisory, x_refsource_SUSE
	http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d	x_refsource_CONFIRM
	http://secunia.com/advisories/19369	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/18203	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0101.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2006/dsa-1018	vendor-advisory, x_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/419522/100/0/threaded	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/428058/100/0/threaded	vendor-advisory, x_refsource_FEDORA
	http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/archive/1/427981/100/0/threaded	vendor-advisory, x_refsource_FEDORA
	http://www.redhat.com/support/errata/RHSA-2006-0190.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/18510	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/15729	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/archive/1/428028/100/0/threaded	vendor-advisory, x_refsource_FEDORA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:018	vendor-advisory, x_refsource_MANDRIVA
	http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:072	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/17918	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1017	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/19374	third-party-advisory, x_refsource_SECUNIA
	https://usn.ubuntu.com/231-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2006-0191.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/18562	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:24:36.194Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2006:0140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
          },
          {
            "name": "17917",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17917"
          },
          {
            "name": "18684",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18684"
          },
          {
            "name": "18977",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18977"
          },
          {
            "name": "SUSE-SA:2005:067",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/advisories/9806"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d"
          },
          {
            "name": "19369",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19369"
          },
          {
            "name": "18203",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18203"
          },
          {
            "name": "RHSA-2006:0101",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
          },
          {
            "name": "DSA-1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1018"
          },
          {
            "name": "oval:org.mitre.oval:def:9903",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903"
          },
          {
            "name": "SUSE-SA:2005:068",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
          },
          {
            "name": "FLSA:157459-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
          },
          {
            "name": "MDKSA-2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
          },
          {
            "name": "FLSA:157459-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
          },
          {
            "name": "RHSA-2006:0190",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
          },
          {
            "name": "18510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18510"
          },
          {
            "name": "15729",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15729"
          },
          {
            "name": "FLSA:157459-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
          },
          {
            "name": "MDKSA-2006:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c"
          },
          {
            "name": "MDKSA-2006:072",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
          },
          {
            "name": "17918",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17918"
          },
          {
            "name": "DSA-1017",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1017"
          },
          {
            "name": "19374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19374"
          },
          {
            "name": "USN-231-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/231-1/"
          },
          {
            "name": "RHSA-2006:0191",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
          },
          {
            "name": "18562",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18562"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2006:0140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
        },
        {
          "name": "17917",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17917"
        },
        {
          "name": "18684",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18684"
        },
        {
          "name": "18977",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18977"
        },
        {
          "name": "SUSE-SA:2005:067",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/advisories/9806"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d"
        },
        {
          "name": "19369",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19369"
        },
        {
          "name": "18203",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18203"
        },
        {
          "name": "RHSA-2006:0101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
        },
        {
          "name": "DSA-1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1018"
        },
        {
          "name": "oval:org.mitre.oval:def:9903",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903"
        },
        {
          "name": "SUSE-SA:2005:068",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
        },
        {
          "name": "FLSA:157459-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
        },
        {
          "name": "MDKSA-2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
        },
        {
          "name": "FLSA:157459-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
        },
        {
          "name": "RHSA-2006:0190",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
        },
        {
          "name": "18510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18510"
        },
        {
          "name": "15729",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15729"
        },
        {
          "name": "FLSA:157459-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
        },
        {
          "name": "MDKSA-2006:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c"
        },
        {
          "name": "MDKSA-2006:072",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
        },
        {
          "name": "17918",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17918"
        },
        {
          "name": "DSA-1017",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1017"
        },
        {
          "name": "19374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19374"
        },
        {
          "name": "USN-231-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/231-1/"
        },
        {
          "name": "RHSA-2006:0191",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
        },
        {
          "name": "18562",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18562"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3806",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2006:0140",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0140.html"
            },
            {
              "name": "17917",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17917"
            },
            {
              "name": "18684",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18684"
            },
            {
              "name": "18977",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18977"
            },
            {
              "name": "SUSE-SA:2005:067",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/advisories/9806"
            },
            {
              "name": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d"
            },
            {
              "name": "19369",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19369"
            },
            {
              "name": "18203",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18203"
            },
            {
              "name": "RHSA-2006:0101",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0101.html"
            },
            {
              "name": "DSA-1018",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1018"
            },
            {
              "name": "oval:org.mitre.oval:def:9903",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903"
            },
            {
              "name": "SUSE-SA:2005:068",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"
            },
            {
              "name": "FLSA:157459-2",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428058/100/0/threaded"
            },
            {
              "name": "MDKSA-2006:044",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044"
            },
            {
              "name": "FLSA:157459-4",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"
            },
            {
              "name": "RHSA-2006:0190",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0190.html"
            },
            {
              "name": "18510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18510"
            },
            {
              "name": "15729",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15729"
            },
            {
              "name": "FLSA:157459-1",
              "refsource": "FEDORA",
              "url": "http://www.securityfocus.com/archive/1/428028/100/0/threaded"
            },
            {
              "name": "MDKSA-2006:018",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"
            },
            {
              "name": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=bbbe80cdaf72a75a463aff9551e60b31e2f69061;hp=f841bde30c18493a94fd5d522b84724a8eb82a4a;hb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d;f=net/ipv6/ip6_flowlabel.c",
              "refsource": "CONFIRM",
              "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=bbbe80cdaf72a75a463aff9551e60b31e2f69061;hp=f841bde30c18493a94fd5d522b84724a8eb82a4a;hb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d;f=net/ipv6/ip6_flowlabel.c"
            },
            {
              "name": "MDKSA-2006:072",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:072"
            },
            {
              "name": "17918",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17918"
            },
            {
              "name": "DSA-1017",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1017"
            },
            {
              "name": "19374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19374"
            },
            {
              "name": "USN-231-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/231-1/"
            },
            {
              "name": "RHSA-2006:0191",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0191.html"
            },
            {
              "name": "18562",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18562"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3806",
    "datePublished": "2005-11-25T21:00:00.000Z",
    "dateReserved": "2005-11-25T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:24:36.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2005-AVI-497

Vulnerability from certfr_avis

None

Description

Tous les éditeurs Linux ont procédé à une mise à jour des noyaux inclus dans les distributions maintenues. Chacun utilisant une version source différente et des ajouts spécifiques, aucun risque commun ne peut être identifié au-delà du déni de service local. Les distributions Ubuntu, Mandriva et Red Hat ont cependant identifié un risque d'élévation de privilèges pour un utilisateur local.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Tout système utilisant un noyau Linux.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité SUSE SuSE-SA:2005:067 du 06 décembre 2005 :	-	other
Bulletin de sécurité Mandriva MDKSA-2005:219 du 30 novembre 2005 (10.1) :	-	other
Bulletin de sécurité Mandriva MDKSA-2005:235 du 21 décembre 2005 (2006.0) :	-	other
Bulletin de sécurité RedHat RHSA-2005:663 du 28 septembre 2005 :	-	other
Bulletin de sécurité Mandriva MDKSA-2005:218 du 30 novembre 2005 (CS3.0 et MNF2.0) :	-	other
Bulletin de sécurité Ubuntu USN-219-1 du 22 novembre 2005 :	-	other
Bulletin de sécurité Debian DSA 921 du 14 décembre 2005 :	-	other
Bulletin de sécurité RedHat RHSA-2005:808 du 27 octobre 2005 :	-	other
Bulletin de sécurité SUSE SuSE-SA:2005:068 du 14 décembre 2005 :	-	other
Bulletin de sécurité Mandriva MDKSA-2005:220 du 30 novembre 2005 (10.2) :	-	other
Mise à jour de sécurité Fedora Core 4 #1138 du 13 décembre 2005 :	-	other
Bulletin de sécurité RedHat RHSA-2006:0144 du 15 mars 2006 :	-	other
Bulletin de sécurité Debian DSA 922 du 14 décembre 2005 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eTout syst\u00e8me utilisant un noyau \u003cTT\u003eLinux\u003c/TT\u003e.\u003c/P\u003e",
  "content": "## Description\n\nTous les \u00e9diteurs Linux ont proc\u00e9d\u00e9 \u00e0 une mise \u00e0 jour des noyaux inclus\ndans les distributions maintenues. Chacun utilisant une version source\ndiff\u00e9rente et des ajouts sp\u00e9cifiques, aucun risque commun ne peut \u00eatre\nidentifi\u00e9 au-del\u00e0 du d\u00e9ni de service local. Les distributions Ubuntu,\nMandriva et Red Hat ont cependant identifi\u00e9 un risque d\u0027\u00e9l\u00e9vation de\nprivil\u00e8ges pour un utilisateur local.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2005-0504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0504"
    },
    {
      "name": "CVE-2005-2490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2490"
    },
    {
      "name": "CVE-2005-3053",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3053"
    },
    {
      "name": "CVE-2005-0136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0136"
    },
    {
      "name": "CVE-2005-2801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2801"
    },
    {
      "name": "CVE-2005-3044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3044"
    },
    {
      "name": "CVE-2005-2553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2553"
    },
    {
      "name": "CVE-2005-2456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2456"
    },
    {
      "name": "CVE-2005-3806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3806"
    },
    {
      "name": "CVE-2005-3660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3660"
    },
    {
      "name": "CVE-2005-3274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3274"
    },
    {
      "name": "CVE-2005-2458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2458"
    },
    {
      "name": "CVE-2005-0179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0179"
    },
    {
      "name": "CVE-2005-3807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3807"
    },
    {
      "name": "CVE-2005-1761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1761"
    },
    {
      "name": "CVE-2005-2709",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2709"
    },
    {
      "name": "CVE-2005-2873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2873"
    },
    {
      "name": "CVE-2005-3257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3257"
    },
    {
      "name": "CVE-2005-3107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3107"
    },
    {
      "name": "CVE-2004-1056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2004-1056"
    },
    {
      "name": "CVE-2005-2459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2459"
    },
    {
      "name": "CVE-2005-2555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2555"
    },
    {
      "name": "CVE-2005-3527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3527"
    },
    {
      "name": "CVE-2005-0756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0756"
    },
    {
      "name": "CVE-2005-0180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0180"
    },
    {
      "name": "CVE-2005-3119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3119"
    },
    {
      "name": "CVE-2005-2800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2800"
    },
    {
      "name": "CVE-2005-1765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1765"
    },
    {
      "name": "CVE-2005-2872",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2872"
    },
    {
      "name": "CVE-2005-1764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1764"
    },
    {
      "name": "CVE-2005-3181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3181"
    },
    {
      "name": "CVE-2005-1589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1589"
    },
    {
      "name": "CVE-2004-2302",
      "url": "https://www.cve.org/CVERecord?id=CVE-2004-2302"
    },
    {
      "name": "CVE-2005-1041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1041"
    },
    {
      "name": "CVE-2005-2099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2099"
    },
    {
      "name": "CVE-2005-3180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3180"
    },
    {
      "name": "CVE-2005-0815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0815"
    },
    {
      "name": "CVE-2005-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1767"
    },
    {
      "name": "CVE-2005-3805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3805"
    },
    {
      "name": "CVE-2005-3273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3273"
    },
    {
      "name": "CVE-2005-3275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3275"
    },
    {
      "name": "CVE-2005-1762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1762"
    },
    {
      "name": "CVE-2005-3784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3784"
    },
    {
      "name": "CVE-2005-0757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0757"
    },
    {
      "name": "CVE-2005-2098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2098"
    },
    {
      "name": "CVE-2005-3179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3179"
    },
    {
      "name": "CVE-2004-0181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2004-0181"
    },
    {
      "name": "CVE-2005-1265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1265"
    },
    {
      "name": "CVE-2005-3055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3055"
    },
    {
      "name": "CVE-2005-0400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0400"
    },
    {
      "name": "CVE-2005-3272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3272"
    },
    {
      "name": "CVE-2005-1768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1768"
    },
    {
      "name": "CVE-2005-3783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3783"
    },
    {
      "name": "CVE-2005-2548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2548"
    },
    {
      "name": "CVE-2005-3110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3110"
    },
    {
      "name": "CVE-2005-1763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-1763"
    },
    {
      "name": "CVE-2005-0449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0449"
    },
    {
      "name": "CVE-2005-3276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3276"
    },
    {
      "name": "CVE-2005-2973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2973"
    },
    {
      "name": "CVE-2005-3106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3106"
    },
    {
      "name": "CVE-2005-0210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0210"
    },
    {
      "name": "CVE-2005-3271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3271"
    },
    {
      "name": "CVE-2005-3108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3108"
    },
    {
      "name": "CVE-2005-3105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3105"
    },
    {
      "name": "CVE-2005-2457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2457"
    },
    {
      "name": "CVE-2005-2492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-2492"
    },
    {
      "name": "CVE-2005-0124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-0124"
    },
    {
      "name": "CVE-2005-3109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3109"
    }
  ],
  "initial_release_date": "2005-12-22T00:00:00",
  "last_revision_date": "2006-03-16T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SuSE-SA:2005:067 du 06 d\u00e9cembre    2005 :",
      "url": "http://www.novell.com/linux/security/advisories/2005_67_kernel.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:219 du 30 novembre    2005 (10.1) :",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:219"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:235 du 21 d\u00e9cembre    2005 (2006.0) :",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:235"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:663 du 28 septembre    2005 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2005-663.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:218 du 30 novembre    2005 (CS3.0 et MNF2.0) :",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:218"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-219-1 du 22 novembre 2005 :",
      "url": "http://www.ubuntulinux.org/usn/usn-219-1"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 921 du 14 d\u00e9cembre 2005 :",
      "url": "http://www.debian.org/security/2005/dsa-921"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:808 du 27 octobre    2005 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2005-808.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE SuSE-SA:2005:068 du 14 d\u00e9cembre    2005 :",
      "url": "http://www.novell.com/linux/security/advisories/2005_68_kernel.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:220 du 30 novembre    2005 (10.2) :",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:220"
    },
    {
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 Fedora Core 4 #1138 du 13 d\u00e9cembre    2005 :",
      "url": "http://www.redhat.com/archives/fedora-announce-list/2005-December/msg0034.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2006:0144 du 15 mars 2006    :",
      "url": "http://rhn.redhat.com/errata/RHSA-2006-0144.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 922 du 14 d\u00e9cembre 2005 :",
      "url": "http://www.debian.org/security/2005/dsa-922"
    }
  ],
  "reference": "CERTA-2005-AVI-497",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-12-22T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence CVE CAN-2005-3660.",
      "revision_date": "2005-12-29T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 RedHat RHSA-2006:0144.",
      "revision_date": "2006-03-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Mise \u00e0 jour des noyaux des distributions Linux",
  "vendor_advisories": []
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2005-3806 (GCVE-0-2005-3806)

Vulnerability from cvelistv5

CERTA-2005-AVI-497

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature