National Cyber Awareness System

Vulnerability Summary for CVE-2005-3055

Overview

Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Request Block (URB) to a USB device and terminates before the URB is finished, which leads to a stale pointer reference.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2005-1863

Hyperlink:http://www.vupen.com/english/advisories/2005/1863

External Source: MANDRAKE

Name: MDKSA-2005:220

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

External Source: MANDRAKE

Name: MDKSA-2005:219

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

External Source: OVAL

Name: oval:org.mitre.oval:def:9472

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9472

External Source: UBUNTU

Name: USN-219-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-219-1

External Source: BID

Name: 14955

Hyperlink:http://www.securityfocus.com/bid/14955

External Source: SUSE

Name: SUSE-SA:2005:068

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/419522/100/0/threaded

External Source: SUSE

Name: SUSE-SA:2005:067

Hyperlink:http://www.securityfocus.com/advisories/9806

External Source: REDHAT

Name: RHSA-2006:0580

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0580.html

External Source: REDHAT

Name: RHSA-2006:0579

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0579.html

External Source: REDHAT

Name: RHSA-2006:0575

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0575.html

External Source: REDHAT

Name: RHSA-2006:0437

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0437.html

External Source: MANDRIVA

Name: MDKSA-2005:235

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

External Source: MANDRIVA

Name: MDKSA-2005:220

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

External Source: MANDRIVA

Name: MDKSA-2005:219

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

External Source: MANDRAKE

Name: MDKSA-2005:218

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:218

External Source: DEBIAN

Name: DSA-1017

Hyperlink:http://www.debian.org/security/2006/dsa-1017

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm

External Source: SECUNIA

Name: 22417

Hyperlink:http://secunia.com/advisories/22417

External Source: SECUNIA

Name: 21983

Hyperlink:http://secunia.com/advisories/21983

External Source: SECUNIA

Name: 21465

Hyperlink:http://secunia.com/advisories/21465

External Source: SECUNIA

Name: 21136

Hyperlink:http://secunia.com/advisories/21136

External Source: SECUNIA

Name: 21035

Hyperlink:http://secunia.com/advisories/21035

External Source: SECUNIA

Name: 19374

Hyperlink:http://secunia.com/advisories/19374

External Source: SECUNIA

Name: 17918

Hyperlink:http://secunia.com/advisories/17918

External Source: SECUNIA

Name: 17917

Hyperlink:http://secunia.com/advisories/17917

External Source: SECUNIA

Name: 17826

Hyperlink:http://secunia.com/advisories/17826

External Source: MLIST

Name: [linux-kernel] 20050925 [BUG/PATCH/RFC] Oops while completing async USB via usbdevio

Hyperlink:http://marc.theaimsgroup.com/?l=linux-kernel&m=112766129313883

References to Check Content

Identifier:oval:org.mitre.oval:def:9472

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9472