CVE-2005-2456

Description

Array index overflow in the xfrm_sk_policy_insert function in xfrm_user.c in Linux kernel 2.6 allows local users to cause a denial of service (oops or deadlock) and possibly execute arbitrary code via a p->dir value that is larger than XFRM_POLICY_OUT, which is used as an index in the sock->sk_policy array.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21710

http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

http://www.mail-archive.com/netdev%40vger.kernel.org/msg00520.html

http://www.debian.org/security/2005/dsa-922

http://www.debian.org/security/2005/dsa-921

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3