Vulnerability Details : CVE-2005-0449
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.
Vulnerability category: Denial of service
Products affected by CVE-2005-0449
- cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*
Threat overview for CVE-2005-0449
Top countries where our scanners detected CVE-2005-0449
Top open port discovered on systems with this issue
49153
IPs affected by CVE-2005-0449 11,248
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2005-0449!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2005-0449
2.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2005-0449
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.1
|
HIGH | AV:N/AC:M/Au:N/C:N/I:N/A:C |
8.6
|
6.9
|
NIST |
CWE ids for CVE-2005-0449
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2005-0449
-
http://www.debian.org/security/2006/dsa-1018
[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities
-
http://www.redhat.com/support/errata/RHSA-2005-366.html
Support
-
http://www.debian.org/security/2006/dsa-1017
[SECURITY] [DSA 1017-1] New Linux kernel 2.6.8 packages fix several vulnerabilities
-
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945
Patch
-
http://www.novell.com/linux/security/advisories/2005_18_kernel.html
404 Page Not Found | SUSEPatch;Vendor Advisory
-
http://www.redhat.com/support/errata/RHSA-2005-283.html
SupportPatch;Vendor Advisory
-
http://secunia.com/advisories/19374
About Secunia Research | FlexeraVendor Advisory
-
https://usn.ubuntu.com/82-1/
-
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218
Advisories - Mandriva Linux
-
http://oss.sgi.com/archives/netdev/2005-01/msg01036.html
Vendor Advisory
-
http://secunia.com/advisories/19369
About Secunia Research | FlexeraVendor Advisory
-
http://secunia.com/advisories/19607
About Secunia Research | FlexeraVendor Advisory
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10753
-
http://www.redhat.com/support/errata/RHSA-2005-293.html
Support
-
http://www.redhat.com/support/errata/RHSA-2005-284.html
Patch;Vendor Advisory
-
ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U
-
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532
152532 – Multiple kernel security problems: CAN-2005-0384, CAN-2005-0400, CAN-2005-0449, CAN-2005-0531(?), CAN-2005-0749, CAN-2005-0750, CAN-2005-0815
-
http://www.securityfocus.com/bid/12598
Jump to