CVE-2005-3275

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2005-10-21

Last modified

2024-08-07

Affected products

• Linux Kernel (Linux)

References

• http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA
• http://secunia.com/advisories/17826
• http://secunia.com/advisories/17918
• http://secunia.com/advisories/18056
• http://secunia.com/advisories/18059
• http://secunia.com/advisories/18562
• http://secunia.com/advisories/18684
• http://secunia.com/advisories/18977
• http://secunia.com/advisories/19185
• http://secunia.com/advisories/19607
• http://www.debian.org/security/2005/dsa-921
• http://www.debian.org/security/2005/dsa-922
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
• http://www.redhat.com/support/errata/RHSA-2006-0140.html
• http://www.redhat.com/support/errata/RHSA-2006-0190.html
• http://www.redhat.com/support/errata/RHSA-2006-0191.html
• http://www.securityfocus.com/archive/1/419522/100/0/threaded
• http://www.securityfocus.com/archive/1/427980/100/0/threaded
• http://www.securityfocus.com/archive/1/428028/100/0/threaded
• http://www.securityfocus.com/archive/1/428058/100/0/threaded
• http://www.securityfocus.com/bid/15531
• http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10142
• https://usn.ubuntu.com/219-1/