← Back to CVEs

CVE-2005-3274

MEDIUM

4.7

Description

Race condition in ip_vs_conn_flush in Linux 2.6 before 2.6.13 and 2.4 before 2.4.32-pre2, when running on SMP systems, allows local users to cause a denial of service (null dereference) by causing a connection timer to expire while the connection table is being flushed before the appropriate lock is acquired.

CVE Details

CVSS v3.1 Score4.7

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

Published10/21/2005

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

debian:debian_linuxlinux:linux_kernel

Weaknesses (CWE)

CWE-476

References

http://lkml.org/lkml/2005/6/23/249(cve@mitre.org)

http://lkml.org/lkml/2005/6/24/173(cve@mitre.org)

http://secunia.com/advisories/17826(cve@mitre.org)

http://secunia.com/advisories/18056(cve@mitre.org)

http://secunia.com/advisories/18684(cve@mitre.org)

http://secunia.com/advisories/18977(cve@mitre.org)

http://www.debian.org/security/2005/dsa-922(cve@mitre.org)

http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:218(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220(cve@mitre.org)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:235(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2005-663.html(cve@mitre.org)

http://www.redhat.com/support/errata/RHSA-2006-0190.html(cve@mitre.org)

http://www.securityfocus.com/archive/1/427980/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/archive/1/427981/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/bid/15528(cve@mitre.org)

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723(cve@mitre.org)

https://usn.ubuntu.com/219-1/(cve@mitre.org)

http://lkml.org/lkml/2005/6/23/249(af854a3a-2127-422b-91ae-364da2661108)

http://lkml.org/lkml/2005/6/24/173(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/17826(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18056(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18684(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/18977(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2005/dsa-922(af854a3a-2127-422b-91ae-364da2661108)

http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git%3Ba=commit%3Bh=e684f066dff5628bb61ad1912de6e8058b5b4c7d(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:218(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220(af854a3a-2127-422b-91ae-364da2661108)

http://www.mandriva.com/security/advisories?name=MDKSA-2005:235(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2005-663.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2006-0190.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/427980/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/427981/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/15528(af854a3a-2127-422b-91ae-364da2661108)

http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11723(af854a3a-2127-422b-91ae-364da2661108)

https://usn.ubuntu.com/219-1/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.