CVE-2005-2456 — MEDIUM (5.5)

Vulnerability Description

Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Linux	Linux Kernel	2.6.0
Debian	Debian Linux	3.1

Related Weaknesses (CWE)

CWE-667

References

http://secunia.com/advisories/16298Broken Link
http://secunia.com/advisories/16500Broken Link
http://secunia.com/advisories/17002Broken Link
http://secunia.com/advisories/17073Broken Link
http://secunia.com/advisories/17826Broken Link
http://secunia.com/advisories/18056Broken Link
http://secunia.com/advisories/18059Broken Link
http://www.debian.org/security/2005/dsa-921Mailing List
http://www.debian.org/security/2005/dsa-922Mailing List
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdifBroken Link
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%Broken Link
http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.htmlPatch
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219PatchThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220PatchThird Party Advisory
http://www.novell.com/linux/security/advisories/2005_50_kernel.htmlBroken Link

FAQ

What is CVE-2005-2456?

CVE-2005-2456 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via...

How severe is CVE-2005-2456?

CVE-2005-2456 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-2456?

Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.