CVE-2005-3275

Linux kernel < 2.6.13 and < 2.4.32-rc1 - Denial of Service via NAT Protocol Variable Corruption

Title source: llm
STIX 2.1

Description

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

References (27)

Core 27
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0140.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18684
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18056
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18977
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18059
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19185
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19607
Third Party Advisory, VDB Entry vendor-advisory x_refsource_suse
http://www.securityfocus.com/archive/1/419522/100/0/threaded
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/428058/100/0/threaded
Various Sources vendor-advisory x_refsource_mandriva
http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-922
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/219-1/
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0190.html
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/428028/100/0/threaded
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-921
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15531
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17826
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17918
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/427980/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0191.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18562

Scores

EPSS 0.0334
EPSS Percentile 87.6%

Details

Status published
Products (15)
linux/linux_kernel 2.4.0 test1 (12 CPE variants)
linux/linux_kernel 2.4.18 (9 CPE variants)
linux/linux_kernel 2.4.19 pre1 (6 CPE variants)
linux/linux_kernel 2.4.21 pre1 (3 CPE variants)
linux/linux_kernel 2.4.22 (2 CPE variants)
linux/linux_kernel 2.4.23 (2 CPE variants)
linux/linux_kernel 2.4.23_ow2
linux/linux_kernel 2.4.24
linux/linux_kernel 2.4.24_ow1
linux/linux_kernel 2.4.25
... and 5 more
Published Oct 21, 2005
Tracked Since Feb 18, 2026