CVE-2005-2872 Integer overflow in n/a
Remote attackers can cause a kernel panic and denial of service on 64-bit Linux systems via the ipt_recent module due to an integer overflow in memset length calculation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-2872?
CVE-2005-2872 is a medium-severity vulnerability in Linux kernel, published on 9 Sep 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.
Which versions are affected by CVE-2005-2872?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2005-2872?
Upgrade to a fixed version.
Is CVE-2005-2872 being exploited?
There is no known exploitation of CVE-2005-2872 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-qwhm-8574-3qr4.