CVE - CVE-2005-3356

CVE-ID
CVE-2005-3356	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:16283 URL:http://www.securityfocus.com/bid/16283 MISC:18510 URL:http://secunia.com/advisories/18510 MISC:18527 URL:http://secunia.com/advisories/18527 MISC:18788 URL:http://secunia.com/advisories/18788 MISC:19038 URL:http://secunia.com/advisories/19038 MISC:19374 URL:http://secunia.com/advisories/19374 MISC:DSA-1017 URL:http://www.debian.org/security/2006/dsa-1017 MISC:FLSA:157459-3 URL:http://www.securityfocus.com/archive/1/427980/100/0/threaded MISC:FLSA:157459-4 URL:http://www.securityfocus.com/archive/1/427981/100/0/threaded MISC:MDKSA-2006:040 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:040~~ (Obsolete source) MISC:RHSA-2006:0101 URL:http://rhn.redhat.com/errata/RHSA-2006-0101.html MISC:SUSE-SA:2006:006 URL:http://www.novell.com/linux/security/advisories/2006_06_kernel.html MISC:SUSE-SA:2006:012 URL:http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html MISC:USN-244-1 URL:https://usn.ubuntu.com/244-1/ MISC:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169130 URL:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169130 MISC:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c7dce9209161eb260cdf9e9172f72c3a02379e6 URL:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c7dce9209161eb260cdf9e9172f72c3a02379e6 MISC:linux-double-decrement-dos(25302) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/25302 MISC:oval:org.mitre.oval:def:10731 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10731
Assigning CNA
Red Hat, Inc.
Date Record Created
20051027	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20051027)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.