CVE-2005-3848
First published: Sun Nov 27 2005(Updated: )
Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | =2.6.11 | |
| Linux kernel | =2.6.11.2 | |
| Linux kernel | =2.6.5 | |
| Linux kernel | =2.6.11.10 | |
| Linux kernel | =2.6.1 | |
| Linux kernel | =2.6.13 | |
| Linux kernel | =2.6.11.8 | |
| Linux kernel | =2.6.10 | |
| Linux kernel | =2.6.11.6 | |
| Linux kernel | =2.6.11.11 | |
| Linux kernel | =2.6.3 | |
| Linux kernel | =2.6.4 | |
| Linux kernel | =2.6.11.5 | |
| Linux kernel | =2.6.2 | |
| Linux kernel | =2.6.8 | |
| Linux kernel | =2.6.12.5 | |
| Linux kernel | =2.6.12.1 | |
| Linux kernel | =2.6.11.9 | |
| Linux kernel | =2.6.0 | |
| Linux kernel | =2.6.12.2 | |
| Linux kernel | =2.6.12.4 | |
| Linux kernel | =2.6.11.3 | |
| Linux kernel | =2.6.12.3 | |
| Linux kernel | =2.6.7 | |
| Linux kernel | =2.6.9-2.6.20 | |
| Linux kernel | =2.6.11.7 | |
| Linux kernel | =2.6.8.1 | |
| Linux kernel | =2.6.11.4 | |
| Linux kernel | =2.6.11.12 | |
| Linux kernel | =2.6.11.1 | |
| Linux kernel | =2.6.6 | |
| Linux kernel | =2.6.12 | |
| Linux Kernel | =2.6.0 | |
| Linux Kernel | =2.6.1 | |
| Linux Kernel | =2.6.2 | |
| Linux Kernel | =2.6.3 | |
| Linux Kernel | =2.6.4 | |
| Linux Kernel | =2.6.5 | |
| Linux Kernel | =2.6.6 | |
| Linux Kernel | =2.6.7 | |
| Linux Kernel | =2.6.8 | |
| Linux Kernel | =2.6.8.1 | |
| Linux Kernel | =2.6.9-2.6.20 | |
| Linux Kernel | =2.6.10 | |
| Linux Kernel | =2.6.11 | |
| Linux Kernel | =2.6.11.1 | |
| Linux Kernel | =2.6.11.2 | |
| Linux Kernel | =2.6.11.3 | |
| Linux Kernel | =2.6.11.4 | |
| Linux Kernel | =2.6.11.5 | |
| Linux Kernel | =2.6.11.6 | |
| Linux Kernel | =2.6.11.7 | |
| Linux Kernel | =2.6.11.8 | |
| Linux Kernel | =2.6.11.9 | |
| Linux Kernel | =2.6.11.10 | |
| Linux Kernel | =2.6.11.11 | |
| Linux Kernel | =2.6.11.12 | |
| Linux Kernel | =2.6.12 | |
| Linux Kernel | =2.6.12.1 | |
| Linux Kernel | =2.6.12.2 | |
| Linux Kernel | =2.6.12.3 | |
| Linux Kernel | =2.6.12.4 | |
| Linux Kernel | =2.6.12.5 | |
| Linux Kernel | =2.6.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cb94c62c252796f42bb83fe40960d12f3ea5a82a
- http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git;a=blob;h=1cf41a8a8db3080c9a9243e77c5c447c8e694f87;hb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd;f=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch
- http://www.securityfocus.com/bid/16044
- http://secunia.com/advisories/18203
- http://www.redhat.com/support/errata/RHSA-2006-0101.html
- http://www.redhat.com/support/errata/RHSA-2006-0140.html
- http://secunia.com/advisories/18510
- http://secunia.com/advisories/18562
- http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html
- http://secunia.com/advisories/19038
- http://www.debian.org/security/2006/dsa-1017
- http://www.debian.org/security/2006/dsa-1018
- http://secunia.com/advisories/19374
- http://secunia.com/advisories/19369
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:072
- http://marc.info/?l=linux-kernel&m=112431016816937&w=2
- http://marc.info/?l=linux-kernel&m=112439084918917&w=2
- http://marc.info/?l=linux-kernel&m=112508479212728&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346
- https://usn.ubuntu.com/231-1/
- http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a
Frequently Asked Questions
What is the severity of CVE-2005-3848?
CVE-2005-3848 is a medium severity vulnerability that can lead to denial of service due to memory consumption.
How do I fix CVE-2005-3848?
To fix CVE-2005-3848, update your Linux kernel to version 2.6.12.6 or later.
Which Linux kernel versions are affected by CVE-2005-3848?
CVE-2005-3848 affects Linux kernel versions 2.6.0 up to and including 2.6.12.5.
What exploits exist for CVE-2005-3848?
Exploits for CVE-2005-3848 leverage crafted packets that trigger a memory leak in the icmp_push_reply function.
Is CVE-2005-3848 remote or local?
CVE-2005-3848 is a remote vulnerability, allowing attackers to impact the system from a distance.
- agent/author
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-historical
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.0
- version/linux kernel/2.6.1
- version/linux kernel/2.6.2
- version/linux kernel/2.6.3
- version/linux kernel/2.6.4
- version/linux kernel/2.6.5
- version/linux kernel/2.6.6
- version/linux kernel/2.6.7
- version/linux kernel/2.6.8
- version/linux kernel/2.6.8.1
- version/linux kernel/2.6.9-2.6.20
- version/linux kernel/2.6.10
- version/linux kernel/2.6.11
- version/linux kernel/2.6.11.1
- version/linux kernel/2.6.11.2
- version/linux kernel/2.6.11.3
- version/linux kernel/2.6.11.4
- version/linux kernel/2.6.11.5
- version/linux kernel/2.6.11.6
- version/linux kernel/2.6.11.7
- version/linux kernel/2.6.11.8
- version/linux kernel/2.6.11.9
- version/linux kernel/2.6.11.10
- version/linux kernel/2.6.11.11
- version/linux kernel/2.6.11.12
- version/linux kernel/2.6.12
- version/linux kernel/2.6.12.1
- version/linux kernel/2.6.12.2
- version/linux kernel/2.6.12.3
- version/linux kernel/2.6.12.4
- version/linux kernel/2.6.12.5
- version/linux kernel/2.6.13