Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-3806

The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.

Published

2005-11-25T21:03:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

9.2

Weaknesses

Type: Primary
CWE-399

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.0	Yes
Operating System	linux	linux_kernel	2.4.1	Yes
Operating System	linux	linux_kernel	2.4.2	Yes
Operating System	linux	linux_kernel	2.4.3	Yes
Operating System	linux	linux_kernel	2.4.10	Yes
Operating System	linux	linux_kernel	2.4.11	Yes
Operating System	linux	linux_kernel	2.4.12	Yes
Operating System	linux	linux_kernel	2.4.13	Yes
Operating System	linux	linux_kernel	2.4.14	Yes
Operating System	linux	linux_kernel	2.4.15	Yes
Operating System	linux	linux_kernel	2.4.16	Yes
Operating System	linux	linux_kernel	2.4.17	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.18	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.19	Yes
Operating System	linux	linux_kernel	2.4.20	Yes
Operating System	linux	linux_kernel	2.4.21	Yes
Operating System	linux	linux_kernel	2.4.21	Yes
Operating System	linux	linux_kernel	2.4.21	Yes
Operating System	linux	linux_kernel	2.4.21	Yes
Operating System	linux	linux_kernel	2.4.22	Yes
Operating System	linux	linux_kernel	2.4.22	Yes
Operating System	linux	linux_kernel	2.4.23	Yes
Operating System	linux	linux_kernel	2.4.23	Yes
Operating System	linux	linux_kernel	2.4.23_ow2	Yes
Operating System	linux	linux_kernel	2.4.24	Yes
Operating System	linux	linux_kernel	2.4.24_ow1	Yes
Operating System	linux	linux_kernel	2.4.25	Yes
Operating System	linux	linux_kernel	2.4.26	Yes
Operating System	linux	linux_kernel	2.4.27	Yes
Operating System	linux	linux_kernel	2.4.27	Yes
Operating System	linux	linux_kernel	2.4.27	Yes
Operating System	linux	linux_kernel	2.4.27	Yes
Operating System	linux	linux_kernel	2.4.27	Yes
Operating System	linux	linux_kernel	2.4.27	Yes
Operating System	linux	linux_kernel	2.4.28	Yes
Operating System	linux	linux_kernel	2.4.29	Yes
Operating System	linux	linux_kernel	2.4.29	Yes
Operating System	linux	linux_kernel	2.4.29	Yes
Operating System	linux	linux_kernel	2.4.30	Yes
Operating System	linux	linux_kernel	2.4.30	Yes
Operating System	linux	linux_kernel	2.4.30	Yes
Operating System	linux	linux_kernel	2.4.31	Yes
Operating System	linux	linux_kernel	2.4.31	Yes
Operating System	linux	linux_kernel	2.4.32	Yes
Operating System	linux	linux_kernel	2.6.0	Yes
Operating System	linux	linux_kernel	2.6.1	Yes
Operating System	linux	linux_kernel	2.6.2	Yes
Operating System	linux	linux_kernel	2.6.3	Yes
Operating System	linux	linux_kernel	2.6.4	Yes
Operating System	linux	linux_kernel	2.6.5	Yes
Operating System	linux	linux_kernel	2.6.6	Yes
Operating System	linux	linux_kernel	2.6.7	Yes
Operating System	linux	linux_kernel	2.6.8	Yes
Operating System	linux	linux_kernel	2.6.8.1	Yes
Operating System	linux	linux_kernel	2.6.9	Yes
Operating System	linux	linux_kernel	2.6.10	Yes
Operating System	linux	linux_kernel	2.6.11	Yes
Operating System	linux	linux_kernel	2.6.11.1	Yes
Operating System	linux	linux_kernel	2.6.11.2	Yes
Operating System	linux	linux_kernel	2.6.11.3	Yes
Operating System	linux	linux_kernel	2.6.11.4	Yes
Operating System	linux	linux_kernel	2.6.11.5	Yes
Operating System	linux	linux_kernel	2.6.11.6	Yes
Operating System	linux	linux_kernel	2.6.11.7	Yes
Operating System	linux	linux_kernel	2.6.11.8	Yes
Operating System	linux	linux_kernel	2.6.11.9	Yes
Operating System	linux	linux_kernel	2.6.11.10	Yes
Operating System	linux	linux_kernel	2.6.11.11	Yes
Operating System	linux	linux_kernel	2.6.11.12	Yes
Operating System	linux	linux_kernel	2.6.12	Yes
Operating System	linux	linux_kernel	2.6.12.1	Yes
Operating System	linux	linux_kernel	2.6.12.2	Yes
Operating System	linux	linux_kernel	2.6.12.3	Yes
Operating System	linux	linux_kernel	2.6.12.4	Yes
Operating System	linux	linux_kernel	2.6.13	Yes
Operating System	linux	linux_kernel	2.6.14	Yes
Operating System	linux	linux_kernel	2.6.14	Yes
Operating System	linux	linux_kernel	2.6.14	Yes
Operating System	linux	linux_kernel	2.6.14	Yes

References

http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c ([email protected])
http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d ([email protected])
http://secunia.com/advisories/17917 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/17918 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/18203 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/18510 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/18562 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/18684 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/18977 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/19369 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/19374 Patch, Vendor Advisory ([email protected])
http://www.debian.org/security/2006/dsa-1017 Patch, Vendor Advisory ([email protected])
http://www.debian.org/security/2006/dsa-1018 Patch, Vendor Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0101.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0140.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0190.html ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0191.html ([email protected])
http://www.securityfocus.com/advisories/9806 ([email protected])
http://www.securityfocus.com/archive/1/419522/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/427981/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/428028/100/0/threaded ([email protected])
http://www.securityfocus.com/archive/1/428058/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/15729 ([email protected])
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 Patch, Vendor Advisory ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903 ([email protected])
https://usn.ubuntu.com/231-1/ ([email protected])
http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c (af854a3a-2127-422b-91ae-364da2661108)
http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/17917 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/17918 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18203 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18510 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18562 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18684 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18977 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19369 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/19374 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1017 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1018 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:072 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0101.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0140.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0190.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0191.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/advisories/9806 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/419522/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/427981/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/428028/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/428058/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/15729 (af854a3a-2127-422b-91ae-364da2661108)
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9903 (af854a3a-2127-422b-91ae-364da2661108)
https://usn.ubuntu.com/231-1/ (af854a3a-2127-422b-91ae-364da2661108)