CVE-2005-3806

Published: Nov 25, 2005Modified: Apr 16, 2026

6.6

Vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

Exploitability: 3.9 / Impact: 9.2

Source: NVD

Description

The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.

Affected (106)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

106 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.4.0
Linux Linux Kernel	Version 2.4.0 test10
Linux Linux Kernel	Version 2.4.0 test11
Linux Linux Kernel	Version 2.4.0 test12
Linux Linux Kernel	Version 2.4.0 test1
Linux Linux Kernel	Version 2.4.0 test2
Linux Linux Kernel	Version 2.4.0 test3
Linux Linux Kernel	Version 2.4.0 test4
Linux Linux Kernel	Version 2.4.0 test5
Linux Linux Kernel	Version 2.4.0 test6
Linux Linux Kernel	Version 2.4.0 test7
Linux Linux Kernel	Version 2.4.0 test8
Linux Linux Kernel	Version 2.4.0 test9
Linux Linux Kernel	Version 2.4.10
Linux Linux Kernel	Version 2.4.11
Linux Linux Kernel	Version 2.4.12
Linux Linux Kernel	Version 2.4.13
Linux Linux Kernel	Version 2.4.14
Linux Linux Kernel	Version 2.4.15
Linux Linux Kernel	Version 2.4.16
Linux Linux Kernel	Version 2.4.17
Linux Linux Kernel	Version 2.4.18
Linux Linux Kernel	Version 2.4.18
Linux Linux Kernel	Version 2.4.18 pre1
Linux Linux Kernel	Version 2.4.18 pre2
Linux Linux Kernel	Version 2.4.18 pre3
Linux Linux Kernel	Version 2.4.18 pre4
Linux Linux Kernel	Version 2.4.18 pre5
Linux Linux Kernel	Version 2.4.18 pre6
Linux Linux Kernel	Version 2.4.18 pre7
Linux Linux Kernel	Version 2.4.18 pre8
Linux Linux Kernel	Version 2.4.19
Linux Linux Kernel	Version 2.4.19 pre1
Linux Linux Kernel	Version 2.4.19 pre2
Linux Linux Kernel	Version 2.4.19 pre3
Linux Linux Kernel	Version 2.4.19 pre4
Linux Linux Kernel	Version 2.4.19 pre5
Linux Linux Kernel	Version 2.4.19 pre6
Linux Linux Kernel	Version 2.4.1
Linux Linux Kernel	Version 2.4.20
Linux Linux Kernel	Version 2.4.21
Linux Linux Kernel	Version 2.4.21 pre1
Linux Linux Kernel	Version 2.4.21 pre4
Linux Linux Kernel	Version 2.4.21 pre7
Linux Linux Kernel	Version 2.4.22
Linux Linux Kernel	Version 2.4.22 pre10
Linux Linux Kernel	Version 2.4.23
Linux Linux Kernel	Version 2.4.23 pre9
Linux Linux Kernel	Version 2.4.23_ow2
Linux Linux Kernel	Version 2.4.24
Linux Linux Kernel	Version 2.4.24_ow1
Linux Linux Kernel	Version 2.4.25
Linux Linux Kernel	Version 2.4.26
Linux Linux Kernel	Version 2.4.27
Linux Linux Kernel	Version 2.4.27 pre1
Linux Linux Kernel	Version 2.4.27 pre2
Linux Linux Kernel	Version 2.4.27 pre3
Linux Linux Kernel	Version 2.4.27 pre4
Linux Linux Kernel	Version 2.4.27 pre5
Linux Linux Kernel	Version 2.4.28
Linux Linux Kernel	Version 2.4.29
Linux Linux Kernel	Version 2.4.29 rc1
Linux Linux Kernel	Version 2.4.29 rc2
Linux Linux Kernel	Version 2.4.2
Linux Linux Kernel	Version 2.4.30
Linux Linux Kernel	Version 2.4.30 rc2
Linux Linux Kernel	Version 2.4.30 rc3
Linux Linux Kernel	Version 2.4.31
Linux Linux Kernel	Version 2.4.31 pre1
Linux Linux Kernel	Version 2.4.32
Linux Linux Kernel	Version 2.4.3
Linux Linux Kernel	Version 2.6.0
Linux Linux Kernel	Version 2.6.10
Linux Linux Kernel	Version 2.6.11.10
Linux Linux Kernel	Version 2.6.11.11
Linux Linux Kernel	Version 2.6.11.12
Linux Linux Kernel	Version 2.6.11.1
Linux Linux Kernel	Version 2.6.11.2
Linux Linux Kernel	Version 2.6.11.3
Linux Linux Kernel	Version 2.6.11.4
Linux Linux Kernel	Version 2.6.11.5
Linux Linux Kernel	Version 2.6.11.6
Linux Linux Kernel	Version 2.6.11.7
Linux Linux Kernel	Version 2.6.11.8
Linux Linux Kernel	Version 2.6.11.9
Linux Linux Kernel	Version 2.6.11
Linux Linux Kernel	Version 2.6.12.1
Linux Linux Kernel	Version 2.6.12.2
Linux Linux Kernel	Version 2.6.12.3
Linux Linux Kernel	Version 2.6.12.4
Linux Linux Kernel	Version 2.6.12
Linux Linux Kernel	Version 2.6.13
Linux Linux Kernel	Version 2.6.14 rc1
Linux Linux Kernel	Version 2.6.14 rc2
Linux Linux Kernel	Version 2.6.14 rc3
Linux Linux Kernel	Version 2.6.14 rc4
Linux Linux Kernel	Version 2.6.1
Linux Linux Kernel	Version 2.6.2
Linux Linux Kernel	Version 2.6.3
Linux Linux Kernel	Version 2.6.4
Linux Linux Kernel	Version 2.6.5
Linux Linux Kernel	Version 2.6.6
Linux Linux Kernel	Version 2.6.7
Linux Linux Kernel	Version 2.6.8.1
Linux Linux Kernel	Version 2.6.8
Linux Linux Kernel	Version 2.6.9 2.6.20

Related CWEs

CWE-399

References (56)

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c

Source: cve@mitre.org

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d

Source: cve@mitre.org

http://secunia.com/advisories/17917

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17918

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18203

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18510

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18562

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18684

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18977

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19369

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19374

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1017

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1018

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:018

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:072

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0101.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0140.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0190.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0191.html

Source: cve@mitre.org

http://www.securityfocus.com/advisories/9806

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/419522/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/427981/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428028/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428058/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15729

Source: cve@mitre.org

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044

Source: cve@mitre.org

PatchVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903

Source: cve@mitre.org

https://usn.ubuntu.com/231-1/

Source: cve@mitre.org