CVE-2005-2456: Medium severity Linux Linux kernel vulnerability
Array index overflow in the xfrmskpolicyinsert function in xfrmuser.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRMPOLICYOUT, which is used as an index in the sock->skpolicy array.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2456?
CVE-2005-2456 is considered to have a high severity due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2005-2456?
To fix CVE-2005-2456, update the Linux kernel to a version that has addressed this vulnerability.
Which versions of the Linux kernel are affected by CVE-2005-2456?
CVE-2005-2456 affects Linux kernel version 2.6.0 and possibly earlier versions.
Can CVE-2005-2456 be exploited remotely?
CVE-2005-2456 typically requires local access for exploitation, making remote exploits unlikely.
What are the potential impacts of CVE-2005-2456?
The impacts of CVE-2005-2456 include system crashes, deadlocks, and the possibility of arbitrary code execution.