CVE-2005-3275

Description

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

2.6

CVSS

Severity: Low

CVSS 2.0 •

EPSS 8.97% Top 10%

Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory debian.org Vendor Advisory sgi.com Vendor Advisory securityfocus.com Vendor Advisory mandriva.com Vendor Advisory redhat.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://www.redhat.com/support/errata/RHSA-2006-0140.html	vendor advisory
http://secunia.com/advisories/18684	third party advisory
http://secunia.com/advisories/18056	third party advisory patch vendor advisory
http://secunia.com/advisories/18977	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142	vdb entry signature
http://secunia.com/advisories/18059	third party advisory patch vendor advisory
http://secunia.com/advisories/19185	third party advisory
http://secunia.com/advisories/19607	third party advisory
http://www.securityfocus.com/archive/1/419522/100/0/threaded	vendor advisory
http://www.securityfocus.com/archive/1/428058/100/0/threaded	vendor advisory
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044	vendor advisory
http://www.debian.org/security/2005/dsa-922	patch vendor advisory
https://usn.ubuntu.com/219-1/	vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0190.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218	vendor advisory
http://www.securityfocus.com/archive/1/428028/100/0/threaded	vendor advisory
http://www.debian.org/security/2005/dsa-921	patch vendor advisory
http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA
http://www.securityfocus.com/bid/15531	vdb entry patch
http://secunia.com/advisories/17826	third party advisory
ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U	vendor advisory
http://secunia.com/advisories/17918	third party advisory patch vendor advisory
http://www.securityfocus.com/archive/1/427980/100/0/threaded	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219	vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0191.html	vendor advisory
http://secunia.com/advisories/18562	third party advisory

Frequently Asked Questions

What is the severity of CVE-2005-3275?: CVE-2005-3275 has been scored as a low severity vulnerability.
How to fix CVE-2005-3275?: To fix CVE-2005-3275, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-3275 being actively exploited in the wild?: It is possible that CVE-2005-3275 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~9% probability that this vulnerability will be exploited by malicious actors in the next 30 days.