NVD

Id
68147  
Name
CVE-2005-2456  
Description
Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2005-08-04  
Modified Date
2017-07-10  
Seq
2005-2456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352248 68147 CVE-2005-2456 oval:org.mitre.oval:def:10858  View
352249 68147 CVE-2005-2456 DSA-921  View
352250 68147 CVE-2005-2456 DSA-922  View
352251 68147 CVE-2005-2456 http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba;hp=ecade4893a139cc35d4fe345ce70242ede5358c4;hb=a4f1bac62564049ea4718c4624b0fadc9f597c84;f=net/xfrm/xfrm_user.c  View
352252 68147 CVE-2005-2456 http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a4f1bac62564049ea4718c4624b0fadc9f597c84  View
352253 68147 CVE-2005-2456 http://www.mail-archive.com/netdev@vger.kernel.org/msg00520.html  View
352254 68147 CVE-2005-2456 SUSE-SA:2005:050  View
352255 68147 CVE-2005-2456 RHSA-2005:514  View
352256 68147 CVE-2005-2456 RHSA-2005:663  View
352257 68147 CVE-2005-2456 FLSA:157459-3  View
352258 68147 CVE-2005-2456 14477  View
352259 68147 CVE-2005-2456 USN-169-1  View
352260 68147 CVE-2005-2456 ADV-2005-1878  View
352261 68147 CVE-2005-2456 linux-kernel-xfrm-dos(21710)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62266 JVNDB-2005-000468 Linux Kernel の XFRM における配列インデックスオーバーフローの脆弱性 Linux Kernel の xfrm_sk_policy_insert() 関数には、ユーザによる入力値の妥当性がに対するチェックが不適切であるため、配列インデックスでバッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-2456 13660 CVE-2005-2456 68147 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000468.html 2005-08-05 2007-04-01 View