Vulnerability Description
Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | 2.6.8 |
| Debian | Debian Linux | 3.1 |
Related Weaknesses (CWE)
References
- http://marc.info/?l=linux-kernel&m=112766129313883Mailing List
- http://secunia.com/advisories/17826Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/17917Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/17918Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/19374Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/21035Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/21136Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/21465Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/21983Permissions RequiredThird Party Advisory
- http://secunia.com/advisories/22417Permissions RequiredThird Party Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm
- http://support.avaya.com/elmodocs2/security/ASA-2006-200.htmThird Party Advisory
- http://www.debian.org/security/2006/dsa-1017Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:218Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
FAQ
What is CVE-2005-3055?
CVE-2005-3055 is a vulnerability with a CVSS score of 2.1 (LOW). Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the U...
How severe is CVE-2005-3055?
CVE-2005-3055 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-3055?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.