CVE-2005-3848

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Memory leak in the icmp_push_reply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted packets that cause the ip_append_data function to fail, aka "DST leak in icmp_push_reply."

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2005-11-26 CVE Reserved
2005-11-27 CVE Published
2024-08-07 CVE Updated
2024-11-03 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (22)

URL	Tag	Source
http://marc.info/?l=linux-kernel&m=112431016816937&w=2	Mailing List
http://marc.info/?l=linux-kernel&m=112439084918917&w=2	Mailing List
http://marc.info/?l=linux-kernel&m=112508479212728&w=2	Mailing List
http://secunia.com/advisories/18203	Third Party Advisory
http://secunia.com/advisories/18510	Third Party Advisory
http://secunia.com/advisories/18562	Third Party Advisory
http://secunia.com/advisories/19038	Third Party Advisory
http://secunia.com/advisories/19369	Third Party Advisory
http://secunia.com/advisories/19374	Third Party Advisory
http://www.kernel.org/git/?p=linux/kernel/git/chrisw/stable-queue.git%3Ba=blob%3Bh=1cf41a8a8db3080c9a9243e77c5c447c8e694f87%3Bhb=9c5fcb99af7c157be45e9d53aeb857ded5211fcd%3Bf=2.6.12.6/fix-dst-leak-in-icmp_push_reply.patch	X_refsource_confirm
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb94c62c252796f42bb83fe40960d12f3ea5a82a	X_refsource_confirm
http://www.securityfocus.com/bid/16044	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11346	Signature

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html	2023-11-07
http://www.debian.org/security/2006/dsa-1017	2023-11-07
http://www.debian.org/security/2006/dsa-1018	2023-11-07
http://www.mandriva.com/security/advisories?name=MDKSA-2006:072	2023-11-07
http://www.redhat.com/support/errata/RHSA-2006-0101.html	2023-11-07
http://www.redhat.com/support/errata/RHSA-2006-0140.html	2023-11-07
https://usn.ubuntu.com/231-1	2023-11-07
https://access.redhat.com/security/cve/CVE-2005-3848	2006-01-19
https://bugzilla.redhat.com/show_bug.cgi?id=1617841	2006-01-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.0 Search vendor "Linux" for product "Linux Kernel" and version "2.6.0"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.8.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.8.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.9 Search vendor "Linux" for product "Linux Kernel" and version "2.6.9"		2.6.20		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.10"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.9 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.9"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.10"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.11"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.11.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.11.12"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.12.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.12.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.12.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.12.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.12.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.12.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.13 Search vendor "Linux" for product "Linux Kernel" and version "2.6.13"		-		Affected