[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248678

 
 

909

 
 

195426

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2005-2459Date: (C)2005-08-23   (M)2023-12-22


The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
BID-14720
SECUNIA-16355
SECUNIA-16500
SECUNIA-17826
SECUNIA-17918
SECUNIA-18056
SECUNIA-18059
DSA-921
DSA-922
MDKSA-2005:219
MDKSA-2005:220
SUSE-SA:2005:050
SUSE-SA:2005:068
USN-169-1
http://bugs.gentoo.org/show_bug.cgi?id=94584
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5

CPE    45
cpe:/o:linux:linux_kernel:2.6.1:rc1
cpe:/o:linux:linux_kernel:2.6.11
cpe:/o:linux:linux_kernel:2.6.0:test1
cpe:/o:linux:linux_kernel:2.6.10
...
CWE    1
CWE-476

© SecPod Technologies