CVE-2005-3275

Published: Oct 21, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Affected (117)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

117 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.4.0 test10
Linux Linux Kernel	Version 2.4.0 test11
Linux Linux Kernel	Version 2.4.0 test12
Linux Linux Kernel	Version 2.4.0 test1
Linux Linux Kernel	Version 2.4.0 test2
Linux Linux Kernel	Version 2.4.0 test3
Linux Linux Kernel	Version 2.4.0 test4
Linux Linux Kernel	Version 2.4.0 test5
Linux Linux Kernel	Version 2.4.0 test6
Linux Linux Kernel	Version 2.4.0 test7
Linux Linux Kernel	Version 2.4.0 test8
Linux Linux Kernel	Version 2.4.0 test9
Linux Linux Kernel	Version 2.4.18
Linux Linux Kernel	Version 2.4.18 pre1
Linux Linux Kernel	Version 2.4.18 pre2
Linux Linux Kernel	Version 2.4.18 pre3
Linux Linux Kernel	Version 2.4.18 pre4
Linux Linux Kernel	Version 2.4.18 pre5
Linux Linux Kernel	Version 2.4.18 pre6
Linux Linux Kernel	Version 2.4.18 pre7
Linux Linux Kernel	Version 2.4.18 pre8
Linux Linux Kernel	Version 2.4.19 pre1
Linux Linux Kernel	Version 2.4.19 pre2
Linux Linux Kernel	Version 2.4.19 pre3
Linux Linux Kernel	Version 2.4.19 pre4
Linux Linux Kernel	Version 2.4.19 pre5
Linux Linux Kernel	Version 2.4.19 pre6
Linux Linux Kernel	Version 2.4.21 pre1
Linux Linux Kernel	Version 2.4.21 pre4
Linux Linux Kernel	Version 2.4.21 pre7
Linux Linux Kernel	Version 2.4.22
Linux Linux Kernel	Version 2.4.22 pre10
Linux Linux Kernel	Version 2.4.23
Linux Linux Kernel	Version 2.4.23 pre9
Linux Linux Kernel	Version 2.4.23_ow2
Linux Linux Kernel	Version 2.4.24
Linux Linux Kernel	Version 2.4.24_ow1
Linux Linux Kernel	Version 2.4.25
Linux Linux Kernel	Version 2.4.26
Linux Linux Kernel	Version 2.4.27
Linux Linux Kernel	Version 2.4.27 pre1
Linux Linux Kernel	Version 2.4.27 pre2
Linux Linux Kernel	Version 2.4.27 pre3
Linux Linux Kernel	Version 2.4.27 pre4
Linux Linux Kernel	Version 2.4.27 pre5
Linux Linux Kernel	Version 2.4.28
Linux Linux Kernel	Version 2.4.29
Linux Linux Kernel	Version 2.4.29 rc1
Linux Linux Kernel	Version 2.4.29 rc2
Linux Linux Kernel	Version 2.4.30
Linux Linux Kernel	Version 2.4.30 rc2
Linux Linux Kernel	Version 2.4.30 rc3
Linux Linux Kernel	Version 2.4.31 pre1
Linux Linux Kernel	Version 2.6.0
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.10 rc2
Linux Linux Kernel	Version 2.6.11.10
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.12
Linux Linux Kernel	Version 2.6.11.1
Linux Linux Kernel	Version 2.6.11.2
Linux Linux Kernel	Version 2.6.11.3
Linux Linux Kernel	Version 2.6.11.4
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11.9
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.11 rc1
Linux Linux Kernel	Version 2.6.11 rc2
Linux Linux Kernel	Version 2.6.11 rc3
Linux Linux Kernel	Version 2.6.11 rc4
Linux Linux Kernel	Version 2.6.11_rc1_bk6
Linux Linux Kernel	Version 2.6.12.1
Linux Linux Kernel	Version 2.6.12.2
Linux Linux Kernel	Version 2.6.12.3
Linux Linux Kernel	Version 2.6.12.4
Linux Linux Kernel	Version 2.6.12.5
Linux Linux Kernel	Version 2.6.12.6
Linux Linux Kernel	Version 2.6.12
Linux Linux Kernel	Version 2.6.12 rc1
Linux Linux Kernel	Version 2.6.12 rc4
Linux Linux Kernel	Version 2.6.12 rc5
Linux Linux Kernel	Version 2.6.1
Linux Linux Kernel	Version 2.6.1 rc1
Linux Linux Kernel	Version 2.6.1 rc2
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.6 rc1
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.7 rc1
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1.5
Linux Linux Kernel	Version 2.6.8.1
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.8 rc1
Linux Linux Kernel	Version 2.6.8 rc2
Linux Linux Kernel	Version 2.6.8 rc3
Linux Linux Kernel	Version 2.6.9 2.6.20

References (54)

ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U (unsafe URL)

Source: cve@mitre.org

http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA

Source: cve@mitre.org

http://secunia.com/advisories/17826

Source: cve@mitre.org

http://secunia.com/advisories/17918

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18056

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18059

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18562

Source: cve@mitre.org

http://secunia.com/advisories/18684

Source: cve@mitre.org

http://secunia.com/advisories/18977

Source: cve@mitre.org

http://secunia.com/advisories/19185

Source: cve@mitre.org

http://secunia.com/advisories/19607

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-921

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-922

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2005:218

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0140.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0190.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0191.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/419522/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/427980/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428028/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428058/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15531

Source: cve@mitre.org

Patch

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142

Source: cve@mitre.org

https://usn.ubuntu.com/219-1/

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U (unsafe URL)