CVE-2005-3044

Description

Multiple vulnerabilities in Linux kernel before 2.6.13.2 allow local users to cause a denial of service (kernel OOPS from null dereference) via (1) fput in a 32-bit ioctl on 64-bit x86 systems or (2) sockfd_put in the 32-bit routing_ioctl function on 64-bit systems.

2.1

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.12%

Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory securityfocus.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory mandriva.com

Affected: n/a n/a

References

Link	Tags
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235	vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0140.html	vendor advisory
http://kernel.org/git/?p=linux/kernel/git/aegl/linux-2.6.git%3Ba=commitdiff%3Bh=35311d6478077f7bfe35c1c653193e658bf32686
http://secunia.com/advisories/17917	third party advisory
http://www.securityfocus.com/bid/14902	vdb entry
http://www.ubuntu.com/usn/usn-187-1	vendor advisory
http://kernel.org/git/?p=linux/kernel/git/chrisw/linux-2.6.13.y.git%3Ba=commit%3Bh=98debffa9114b60138b3dbd4d02ce13f01a07ab4
http://www.securityfocus.com/advisories/9806	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220	vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0101.html	vendor advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.2
http://www.securityfocus.com/archive/1/419522/100/0/threaded	vendor advisory
http://www.securityfocus.com/archive/1/428058/100/0/threaded	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9561	signature vdb entry
http://www.securityfocus.com/archive/1/427981/100/0/threaded	vendor advisory
http://secunia.com/advisories/18510	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218	vendor advisory
http://secunia.com/advisories/17826	third party advisory
http://secunia.com/advisories/17918	third party advisory
http://www.securityfocus.com/archive/1/427980/100/0/threaded	vendor advisory
http://www.debian.org/security/2006/dsa-1017	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:059	vendor advisory
http://secunia.com/advisories/19374	third party advisory
http://secunia.com/advisories/18562	third party advisory

Frequently Asked Questions

What is the severity of CVE-2005-3044?: CVE-2005-3044 has been scored as a low severity vulnerability.
How to fix CVE-2005-3044?: To fix CVE-2005-3044, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-3044 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2005-3044 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.