CVE-2005-3809

Published: Nov 25, 2005Modified: Apr 16, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The nfattr_to_tcp function in ip_conntrack_proto_tcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via an update message without private protocol information, which triggers a null dereference.

Affected (8)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.14.1
Linux Linux Kernel	Version 2.6.14.2
Linux Linux Kernel	Version 2.6.14.3
Linux Linux Kernel	Version 2.6.14
Linux Linux Kernel	Version 2.6.14 rc1
Linux Linux Kernel	Version 2.6.14 rc2
Linux Linux Kernel	Version 2.6.14 rc3
Linux Linux Kernel	Version 2.6.14 rc4

References (6)

http://marc.info/?l=linux-kernel&m=113269476105016&w=2

Source: cve@mitre.org

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3

Source: cve@mitre.org

http://www.osvdb.org/24114

Source: cve@mitre.org

http://marc.info/?l=linux-kernel&m=113269476105016&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.14.3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24114

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.