CVE

Id
13304  
CVE No.
CVE-2005-2098  
Status
Candidate  
Description
The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.  
Phase
Assigned (20050630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96209 13304 CVE-2005-2098 CONFIRM:http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5  View
96210 13304 CVE-2005-2098 FEDORA:FLSA:157459-3  View
96211 13304 CVE-2005-2098 URL:http://www.securityfocus.com/archive/1/archive/1/427980/100/0/threaded  View
96212 13304 CVE-2005-2098 MANDRAKE:MDKSA-2005:220  View
96213 13304 CVE-2005-2098 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:220  View
96214 13304 CVE-2005-2098 REDHAT:RHSA-2005:514  View
96215 13304 CVE-2005-2098 URL:http://www.redhat.com/support/errata/RHSA-2005-514.html  View
96216 13304 CVE-2005-2098 UBUNTU:USN-169-1  View
96217 13304 CVE-2005-2098 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-169-1  View
96218 13304 CVE-2005-2098 BID:14521  View
96219 13304 CVE-2005-2098 URL:http://www.securityfocus.com/bid/14521  View
96220 13304 CVE-2005-2098 OVAL:oval:org.mitre.oval:def:9638  View
96221 13304 CVE-2005-2098 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9638  View
96222 13304 CVE-2005-2098 SECUNIA:16355  View
96223 13304 CVE-2005-2098 URL:http://secunia.com/advisories/16355/  View
96224 13304 CVE-2005-2098 SECUNIA:17073  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62278 JVNDB-2005-000480 Red Hat Enterprise Linux の Linux Kernel 4GB/4GB スプリット機能におけるサービス運用妨害 (DoS) の脆弱性 Red Hat Enterprise Linux の Linux Kernel には、メモリ処理において 4GB/4GB スプリット機能を考慮した境界チェックが行われていないため、hugemem カーネルでシステムが稼動している場合、システムがクラッシュしてしまう脆弱性が存在します。 CVE-2005-2100 13304 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000480.html  View