CVE-2005-3273

security flaw

Published Oct 20, 2005 CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed
Description
The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-922-1 New Linux 2.6.8 packages fix several vulnerabilities
EUVD EUVD EUVD-2005-3272 The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.
Ubuntu USN Ubuntu USN USN-219-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:10 PM
Reserved
Oct 20, 2005, 12:00 AM
Status
Modified
Published
Oct 21, 2005, 1:02 AM
Modified
Jun 16, 2026, 10:16 PM
Severity
Moderate
Public date
Dec 16, 2004, 12:00 AM