CVE-2005-2456

Description

Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
CVSS 2.0 •
EPSS 0.12%
Vendor Advisory novell.com Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory securityfocus.com Vendor Advisory redhat.com Vendor Advisory mandriva.com
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
http://www.novell.com/linux/security/advisories/2005_50_kernel.html vendor advisory broken link
http://secunia.com/advisories/18056 third party advisory broken link
https://usn.ubuntu.com/169-1/ vendor advisory broken link
http://secunia.com/advisories/16500 third party advisory broken link
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 patch vendor advisory third party advisory
http://secunia.com/advisories/17073 third party advisory broken link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10858 signature vdb entry broken link
http://secunia.com/advisories/18059 third party advisory broken link
http://www.debian.org/security/2005/dsa-922 vendor advisory mailing list
https://exchange.xforce.ibmcloud.com/vulnerabilities/21710 third party advisory vdb entry
http://www.securityfocus.com/bid/14477 broken link third party advisory vdb entry
http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html patch
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=8da3e25b2c4c1f305fd85428d3a9eb62b543bfba%3Bhp=ecade4893a139cc35d4fe345ce70242ede5358c4%3Bhb=a4f1bac62564049ea4718c4624b0fadc9f597c84%3Bf=net/xfrm/xfrm_user.c broken link
http://www.debian.org/security/2005/dsa-921 vendor advisory mailing list
http://www.redhat.com/support/errata/RHSA-2005-514.html vendor advisory broken link
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a4f1bac62564049ea4718c4624b0fadc9f597c84 broken link
http://secunia.com/advisories/17002 third party advisory broken link
http://secunia.com/advisories/17826 third party advisory broken link
http://secunia.com/advisories/16298 third party advisory broken link
http://www.securityfocus.com/archive/1/427980/100/0/threaded vendor advisory broken link third party advisory vdb entry
http://www.redhat.com/support/errata/RHSA-2005-663.html vendor advisory broken link
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 patch vendor advisory third party advisory
http://www.vupen.com/english/advisories/2005/1878 vdb entry broken link

Frequently Asked Questions

What is the severity of CVE-2005-2456?
CVE-2005-2456 has been scored as a medium severity vulnerability.
How to fix CVE-2005-2456?
To fix CVE-2005-2456, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-2456 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2005-2456 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.