SB2005112201 - Resource management errors in Linux kernel
Published: November 22, 2005
Security Bulletin ID
SB2005112201
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource management errors (CVE-ID: CVE-2005-3753)
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors. NOTE: it is not clear whether this issue can be triggered by an attacker.
Remediation
Install update from vendor's website.