CVE

Id
13662  
CVE No.
CVE-2005-2456  
Status
Candidate  
Description
Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.  
Phase
Assigned (20050804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
99203 13662 CVE-2005-2456 MISC:http://www.mail-archive.com/netdev@vger.kernel.org/msg00520.html  View
99204 13662 CVE-2005-2456 CONFIRM:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a4f1bac62564049ea4718c4624b0fadc9f597c84  View
99205 13662 CVE-2005-2456 CONFIRM:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba;hp=ecade4893a139cc35d4fe345ce70242ede5358c4;hb=a4f1bac62564049ea4718c4624b0fadc9f597c84;f=net/xfrm/xfrm_user.c  View
99206 13662 CVE-2005-2456 DEBIAN:DSA-922  View
99207 13662 CVE-2005-2456 URL:http://www.debian.org/security/2005/dsa-922  View
99208 13662 CVE-2005-2456 DEBIAN:DSA-921  View
99209 13662 CVE-2005-2456 URL:http://www.debian.org/security/2005/dsa-921  View
99210 13662 CVE-2005-2456 FEDORA:FLSA:157459-3  View
99211 13662 CVE-2005-2456 URL:http://www.securityfocus.com/archive/1/archive/1/427980/100/0/threaded  View
99212 13662 CVE-2005-2456 MANDRAKE:MDKSA-2005:219  View
99213 13662 CVE-2005-2456 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:219  View
99214 13662 CVE-2005-2456 MANDRAKE:MDKSA-2005:220  View
99215 13662 CVE-2005-2456 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:220  View
99216 13662 CVE-2005-2456 REDHAT:RHSA-2005:514  View
99217 13662 CVE-2005-2456 URL:http://www.redhat.com/support/errata/RHSA-2005-514.html  View
99218 13662 CVE-2005-2456 REDHAT:RHSA-2005:663  View
99219 13662 CVE-2005-2456 URL:http://www.redhat.com/support/errata/RHSA-2005-663.html  View
99220 13662 CVE-2005-2456 UBUNTU:USN-169-1  View
99221 13662 CVE-2005-2456 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-169-1  View
99222 13662 CVE-2005-2456 SUSE:SUSE-SA:2005:050  View
99223 13662 CVE-2005-2456 URL:http://www.novell.com/linux/security/advisories/2005_50_kernel.html  View
99224 13662 CVE-2005-2456 BID:14477  View
99225 13662 CVE-2005-2456 URL:http://www.securityfocus.com/bid/14477  View
99226 13662 CVE-2005-2456 OVAL:oval:org.mitre.oval:def:10858  View
99227 13662 CVE-2005-2456 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10858  View
99228 13662 CVE-2005-2456 VUPEN:ADV-2005-1878  View
99229 13662 CVE-2005-2456 URL:http://www.vupen.com/english/advisories/2005/1878  View
99230 13662 CVE-2005-2456 SECUNIA:16298  View
99231 13662 CVE-2005-2456 URL:http://secunia.com/advisories/16298  View
99232 13662 CVE-2005-2456 SECUNIA:16500  View
99233 13662 CVE-2005-2456 URL:http://secunia.com/advisories/16500  View
99234 13662 CVE-2005-2456 SECUNIA:18056  View
99235 13662 CVE-2005-2456 URL:http://secunia.com/advisories/18056  View
99236 13662 CVE-2005-2456 SECUNIA:18059  View
99237 13662 CVE-2005-2456 URL:http://secunia.com/advisories/18059  View
99238 13662 CVE-2005-2456 SECUNIA:17073  View
99239 13662 CVE-2005-2456 URL:http://secunia.com/advisories/17073  View
99240 13662 CVE-2005-2456 SECUNIA:17826  View
99241 13662 CVE-2005-2456 URL:http://secunia.com/advisories/17826  View
99242 13662 CVE-2005-2456 SECUNIA:17002  View
99243 13662 CVE-2005-2456 URL:http://secunia.com/advisories/17002  View
99244 13662 CVE-2005-2456 XF:linux-kernel-xfrm-dos(21710)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62285 JVNDB-2005-000487 Linux Kernel の zlib ライブラリにおけるセグメンテーションフォルトの脆弱性 ------------ CVE-2005-2458 13662 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000487.html  View