// For flags

CVE-2005-3181

 

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-10-11 CVE Reserved
  • 2005-10-11 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-401: Missing Release of Memory after Effective Lifetime
CAPEC
References (22)
URL Tag Source
http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=829841146878e082613a49581ae252c071057c23 Broken Link
http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA Broken Link
http://www.securityfocus.com/bid/15076 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9467 Broken Link
URL Date SRC
URL Date SRC
URL Date SRC
http://secunia.com/advisories/17114 2024-01-26
http://secunia.com/advisories/17280 2024-01-26
http://secunia.com/advisories/17364 2024-01-26
http://secunia.com/advisories/17826 2024-01-26
http://secunia.com/advisories/17917 2024-01-26
http://secunia.com/advisories/19374 2024-01-26
http://www.debian.org/security/2006/dsa-1017 2024-01-26
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 2024-01-26
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 2024-01-26
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 2024-01-26
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 2024-01-26
http://www.redhat.com/support/errata/RHSA-2005-808.html 2024-01-26
http://www.securityfocus.com/advisories/9549 2024-01-26
http://www.securityfocus.com/advisories/9806 2024-01-26
http://www.securityfocus.com/archive/1/427980/100/0/threaded 2024-01-26
http://www.ubuntu.com/usn/usn-199-1 2024-01-26
https://access.redhat.com/security/cve/CVE-2005-3181 2005-10-27
https://bugzilla.redhat.com/show_bug.cgi?id=1617791 2005-10-27
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 2.6.0 <= 2.6.13.3
Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.0 <= 2.6.13.3"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 4.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "4.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 5.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "5.04"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 3.1
Search vendor "Debian" for product "Debian Linux" and version "3.1"
-
Affected
Mandriva
Search vendor "Mandriva"
 Linux
Search vendor "Mandriva" for product "Linux"
 10.1
Search vendor "Mandriva" for product "Linux" and version "10.1"
-
Affected
Mandriva
Search vendor "Mandriva"
 Linux
Search vendor "Mandriva" for product "Linux"
 10.2
Search vendor "Mandriva" for product "Linux" and version "10.2"
-
Affected
Mandriva
Search vendor "Mandriva"
 Linux
Search vendor "Mandriva" for product "Linux"
 2006.0
Search vendor "Mandriva" for product "Linux" and version "2006.0"
-
Affected