CVE-2005-3181

Published: Oct 12, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).

Affected (7)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · +1 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Mandriva: Linux

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.0 to 2.6.13.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 4.10
Canonical Ubuntu Linux	Version 5.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Mandriva Linux	Version 10.1
Mandriva Linux	Version 10.2
Mandriva Linux	Version 2006.0

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (40)

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=829841146878e082613a49581ae252c071057c23

Source: secalert@redhat.com

Broken Link

http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/17114

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/17280

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/17364

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/17826

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/17917

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://secunia.com/advisories/19374

Source: secalert@redhat.com

Broken LinkVendor Advisory

http://www.debian.org/security/2006/dsa-1017

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:218

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2005-808.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/advisories/9549

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/advisories/9806

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/427980/100/0/threaded

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/15076

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-199-1

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467

Source: secalert@redhat.com

Broken Link

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=829841146878e082613a49581ae252c071057c23