CVE-2005-3848
- State
- Published
- Severity
- Not scored
- Published
- Nov 27, 2005
- Updated
- Aug 7, 2024
- Reserved
- Nov 26, 2005
Description
Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2006:0140vendor-advisory
- 19038third-party-advisory
- [linux-kernel] 20050817 [PATCH] fix dst_entry leak in icmp_push_reply()mailing-list
- [linux-kernel] 20050826 [PATCH 4/7] [IPV4]: Fix DST leak in icmp_push_reply()mailing-list
- 19369third-party-advisory
- 18203third-party-advisory
- RHSA-2006:0101vendor-advisory
- 16044vdb-entry
- DSA-1018vendor-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a
- oval:org.mitre.oval:def:11346vdb-entrysignature
- 18510third-party-advisory
- SUSE-SA:2006:012vendor-advisory
- MDKSA-2006:072vendor-advisory
- DSA-1017vendor-advisory
- http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch
- 19374third-party-advisory
- [linux-kernel] 20050818 Re: [PATCH] fix dst_entry leak in icmp_push_reply()mailing-list
- USN-231-1vendor-advisory
- 18562third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.