Vulnerability Description
Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 2.4.0, <= 2.4.31 |
| Debian | Debian Linux | 3.1 |
Related Weaknesses (CWE)
References
- http://lkml.org/lkml/2005/6/23/249Mailing ListPatch
- http://lkml.org/lkml/2005/6/24/173Mailing ListPatch
- http://secunia.com/advisories/17826Broken Link
- http://secunia.com/advisories/18056Broken Link
- http://secunia.com/advisories/18684Broken Link
- http://secunia.com/advisories/18977Broken Link
- http://www.debian.org/security/2005/dsa-922Third Party Advisory
- http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Patch
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:218PatchThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219PatchThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:220PatchThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:235PatchThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2005-663.htmlBroken Link
- http://www.redhat.com/support/errata/RHSA-2006-0190.htmlBroken Link
- http://www.securityfocus.com/archive/1/427980/100/0/threadedBroken LinkThird Party AdvisoryVDB Entry
FAQ
What is CVE-2005-3274?
CVE-2005-3274 is a vulnerability with a CVSS score of 4.7 (MEDIUM). Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a c...
How severe is CVE-2005-3274?
CVE-2005-3274 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-3274?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Debian Debian Linux.