National Cyber Awareness System

Vulnerability Summary for CVE-2005-3857

Overview

The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MISC

Name: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337

Hyperlink:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174337

External Source: VUPEN

Name: ADV-2005-2649

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2005/2649

External Source: UBUNTU

Name: USN-231-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-231-1

External Source: TRUSTIX

Name: TSLSA-2005-0070

Hyperlink:http://www.trustix.org/errata/2005/0070

External Source: BID

Name: 15627

Hyperlink:http://www.securityfocus.com/bid/15627

External Source: FEDORA

Name: FLSA:157459-2

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/428058/100/0/threaded

External Source: FEDORA

Name: FLSA:157459-1

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/428028/100/0/threaded

External Source: FEDORA

Name: FLSA:157459-4

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/427981/100/0/threaded

External Source: REDHAT

Name: RHSA-2006:0140

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0140.html

External Source: REDHAT

Name: RHSA-2006:0101

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0101.html

External Source: MANDRIVA

Name: MDKSA-2006:072

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:072

External Source: CONFIRM

Name: http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ed0175a462c4c30f6df6fac1cccac058f997739

Hyperlink:http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7ed0175a462c4c30f6df6fac1cccac058f997739

External Source: DEBIAN

Name: DSA-1018

Hyperlink:http://www.debian.org/security/2006/dsa-1018

External Source: DEBIAN

Name: DSA-1017

Hyperlink:http://www.debian.org/security/2006/dsa-1017

External Source: SECUNIA

Name: 19607

Type: Advisory

Hyperlink:http://secunia.com/advisories/19607

External Source: SECUNIA

Name: 19374

Type: Advisory

Hyperlink:http://secunia.com/advisories/19374

External Source: SECUNIA

Name: 19369

Type: Advisory

Hyperlink:http://secunia.com/advisories/19369

External Source: SECUNIA

Name: 18562

Type: Advisory

Hyperlink:http://secunia.com/advisories/18562

External Source: SECUNIA

Name: 18510

Type: Advisory

Hyperlink:http://secunia.com/advisories/18510

External Source: SECUNIA

Name: 18203

Type: Advisory

Hyperlink:http://secunia.com/advisories/18203

External Source: SECUNIA

Name: 17787

Type: Advisory

Hyperlink:http://secunia.com/advisories/17787

External Source: SECUNIA

Name: 17786

Type: Advisory

Hyperlink:http://secunia.com/advisories/17786

External Source: OVAL

Name: oval:org.mitre.oval:def:9727

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9727

External Source: MLIST

Name: [linux-kernel] 20051113 [GIT] Fix memory leak in lease code

Hyperlink:http://marc.theaimsgroup.com/?l=linux-kernel&m=113190437101622&w=2

External Source: MLIST

Name: [linux-kernel] 20051112 Re: local denial-of-service with file leases

Hyperlink:http://marc.theaimsgroup.com/?l=linux-kernel&m=113175851920568&w=2

External Source: SGI

Name: 20060402-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U

References to Check Content

Identifier:oval:org.mitre.oval:def:9727

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9727