First published: Fri Nov 25 2005(Updated: )
ip_conntrack_proto_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via a message without ICMP ID (ICMP_ID) information, which leads to a null dereference.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | =2.6.14 | |
Linux Kernel | =2.6.14-rc1 | |
Linux Kernel | =2.6.14-rc2 | |
Linux Kernel | =2.6.14-rc3 | |
Linux Kernel | =2.6.14-rc4 | |
Linux Kernel | =2.6.14.1 | |
Linux Kernel | =2.6.14.2 | |
Linux Kernel | =2.6.14.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-3810 is classified as a denial-of-service vulnerability that may lead to a kernel crash.
To fix CVE-2005-3810, upgrade your Linux kernel to version 2.6.14.4 or later.
CVE-2005-3810 affects Linux kernel versions 2.6.14 up to 2.6.14.3, including various release candidates.
CVE-2005-3810 allows attackers to launch a denial-of-service attack by causing a kernel oops.
The denial of service in CVE-2005-3810 is caused by a null dereference when processing an ICMP message without ID information.