CVE-2005-3180

Description

The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 1.88% Top 20%

Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory securityfocus.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235	vendor advisory
http://www.kernel.org/hg/linux-2.6/?cmd=changeset%3Bnode=feecb2ffde28639e60ede769c6f817dc536c677b
http://www.redhat.com/support/errata/RHSA-2006-0140.html	vendor advisory
http://www.redhat.com/support/errata/RHSA-2005-808.html	vendor advisory
http://secunia.com/advisories/17917	third party advisory
http://secunia.com/advisories/18684	third party advisory
http://www.securityfocus.com/advisories/9806	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220	vendor advisory
http://secunia.com/advisories/17364	third party advisory
http://securityreason.com/securityalert/75	third party advisory
http://www.securityfocus.com/archive/1/419522/100/0/threaded	vendor advisory
http://www.securityfocus.com/archive/1/428058/100/0/threaded	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11332	signature vdb entry
https://usn.ubuntu.com/219-1/	vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0190.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218	vendor advisory
http://www.securityfocus.com/archive/1/428028/100/0/threaded	vendor advisory
http://www.securityfocus.com/bid/15085	vdb entry
http://secunia.com/advisories/17280	third party advisory
http://secunia.com/advisories/17826	third party advisory
http://www.securityfocus.com/advisories/9549	vendor advisory
http://secunia.com/advisories/17918	third party advisory
http://www.securityfocus.com/archive/1/427980/100/0/threaded	vendor advisory
http://www.debian.org/security/2006/dsa-1017	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219	vendor advisory
http://secunia.com/advisories/17114	third party advisory
http://secunia.com/advisories/19374	third party advisory
http://www.redhat.com/support/errata/RHSA-2006-0191.html	vendor advisory
http://marc.info/?l=bugtraq&m=112914754708402&w=2	mailing list
http://secunia.com/advisories/18562	third party advisory

Frequently Asked Questions

What is the severity of CVE-2005-3180?: CVE-2005-3180 has been scored as a medium severity vulnerability.
How to fix CVE-2005-3180?: To fix CVE-2005-3180, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-3180 being actively exploited in the wild?: It is possible that CVE-2005-3180 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.