CVE-2005-3807 – Linux Kernel 2.6.x - File Lock Lease Local Denial of Service
https://notcve.org/view.php?id=CVE-2005-3807
25 Nov 2005 — Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function. • https://www.exploit-db.com/exploits/26749 •
CVE-2005-3808 – Linux Kernel 2.6.x - INVALIDATE_INODE_PAGES2 Local Integer Overflow
https://notcve.org/view.php?id=CVE-2005-3808
25 Nov 2005 — Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system. • https://www.exploit-db.com/exploits/26811 •
CVE-2005-3805
https://notcve.org/view.php?id=CVE-2005-3805
25 Nov 2005 — A locking problem in POSIX timer cleanup handling on exit in Linux kernel 2.6.10 to 2.6.14, when running on SMP systems, allows local users to cause a denial of service (deadlock) involving process CPU timers. • http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25f407f0b668f5e4ebd5d13e1fb4306ba6427ead •
CVE-2005-3810
https://notcve.org/view.php?id=CVE-2005-3810
25 Nov 2005 — ip_conntrack_proto_icmp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via a message without ICMP ID (ICMP_ID) information, which leads to a null dereference. • http://marc.info/?l=linux-kernel&m=113269476307795&w=2 •
CVE-2005-3809
https://notcve.org/view.php?id=CVE-2005-3809
25 Nov 2005 — The nfattr_to_tcp function in ip_conntrack_proto_tcp.c in ctnetlink in Linux kernel 2.6.14 up to 2.6.14.3 allows attackers to cause a denial of service (kernel oops) via an update message without private protocol information, which triggers a null dereference. • http://marc.info/?l=linux-kernel&m=113269476105016&w=2 •
CVE-2005-3806
https://notcve.org/view.php?id=CVE-2005-3806
25 Nov 2005 — The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory. • http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=bbbe80cdaf72a75a463aff9551e60b31e2f69061%3Bhp=f841bde30c18493a94fd5d522b84724a8eb82a4a%3Bhb=4ea6a8046bb49d43c950898f0cb4e1994ef6c89d%3Bf=net/ipv6/ip6_flowlabel.c • CWE-399: Resource Management Errors •
CVE-2005-3784
https://notcve.org/view.php?id=CVE-2005-3784
23 Nov 2005 — The auto-reap of child processes in Linux kernel 2.6 before 2.6.15 includes processes with ptrace attached, which leads to a dangling ptrace reference and allows local users to cause a denial of service (crash) and gain root privileges. • http://secunia.com/advisories/17786 • CWE-399: Resource Management Errors •
CVE-2005-3783
https://notcve.org/view.php?id=CVE-2005-3783
23 Nov 2005 — The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash). • ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U •
CVE-2005-3753
https://notcve.org/view.php?id=CVE-2005-3753
22 Nov 2005 — Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors. NOTE: it is not clear whether this issue can be triggered by an attacker. • http://bugzilla.kernel.org/show_bug.cgi?id=5194 •
CVE-2005-2709 – Linux Kernel 2.6.x - Sysctl Unregistration Local Denial of Service
https://notcve.org/view.php?id=CVE-2005-2709
20 Nov 2005 — The sysctl functionality (sysctl.c) in Linux kernel before 2.6.14.1 allows local users to cause a denial of service (kernel oops) and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function pointers in memory that was used for the ctl_table. • https://www.exploit-db.com/exploits/26489 • CWE-399: Resource Management Errors •