CVE-2005-2099 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-2099
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-2099

Description: The Linux kernel before 2.6.12.5 does not properly destroy a keyring that is not instantiated properly, which allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty, which causes the creation to fail, leading to a null dereference in the keyring destructor.

CVE Status: Candidate

References: UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-169-1 ST 1014644 SAID Secunia Advisory: SA16355 Secunia Advisory: SA17073 REDHAT http://www.redhat.com/support/errata/RHSA-2005-514.html MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:220 MANDRAKE http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:220 FEDORA http://www.securityfocus.com/archive/1/archive/1/427980/100/0/threaded CONFIRM http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5 BID 14517

Return to the previous page.