Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then preventing Linux from being able to finish the transfer by causing the process to become a zombie, or closing the file descriptor without closing an associated reference.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:02
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/18205 - | |
References | () http://securityreason.com/securityalert/291 - | |
References | () http://securitytracker.com/id?1015402 - | |
References | () http://www.idefense.com/intelligence/vulnerabilities/display.php?id=362 - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/16041 - | |
References | () http://www.vupen.com/english/advisories/2005/3076 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/23835 - |
Information
Published : 2005-12-22 23:03
Updated : 2024-11-21 00:02
NVD link : CVE-2005-3660
Mitre link : CVE-2005-3660
CVE.ORG link : CVE-2005-3660
JSON object : View
Products Affected
linux
- linux_kernel
CWE