CVE Vulnerabilities

CVE-2005-2459

NULL Pointer Dereference

Published: Aug 23, 2005 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux 2.6.0 (including) 2.6.0 (including)
Linux_kernel Linux 2.6.0-test1 (including) 2.6.0-test1 (including)
Linux_kernel Linux 2.6.0-test10 (including) 2.6.0-test10 (including)
Linux_kernel Linux 2.6.0-test11 (including) 2.6.0-test11 (including)
Linux_kernel Linux 2.6.0-test2 (including) 2.6.0-test2 (including)
Linux_kernel Linux 2.6.0-test3 (including) 2.6.0-test3 (including)
Linux_kernel Linux 2.6.0-test4 (including) 2.6.0-test4 (including)
Linux_kernel Linux 2.6.0-test5 (including) 2.6.0-test5 (including)
Linux_kernel Linux 2.6.0-test6 (including) 2.6.0-test6 (including)
Linux_kernel Linux 2.6.0-test7 (including) 2.6.0-test7 (including)
Linux_kernel Linux 2.6.0-test8 (including) 2.6.0-test8 (including)
Linux_kernel Linux 2.6.0-test9 (including) 2.6.0-test9 (including)
Linux_kernel Linux 2.6.1 (including) 2.6.1 (including)
Linux_kernel Linux 2.6.1-rc1 (including) 2.6.1-rc1 (including)
Linux_kernel Linux 2.6.1-rc2 (including) 2.6.1-rc2 (including)
Linux_kernel Linux 2.6.2 (including) 2.6.2 (including)
Linux_kernel Linux 2.6.3 (including) 2.6.3 (including)
Linux_kernel Linux 2.6.4 (including) 2.6.4 (including)
Linux_kernel Linux 2.6.5 (including) 2.6.5 (including)
Linux_kernel Linux 2.6.6 (including) 2.6.6 (including)
Linux_kernel Linux 2.6.6-rc1 (including) 2.6.6-rc1 (including)
Linux_kernel Linux 2.6.7 (including) 2.6.7 (including)
Linux_kernel Linux 2.6.7-rc1 (including) 2.6.7-rc1 (including)
Linux_kernel Linux 2.6.8 (including) 2.6.8 (including)
Linux_kernel Linux 2.6.8-rc1 (including) 2.6.8-rc1 (including)
Linux_kernel Linux 2.6.8-rc2 (including) 2.6.8-rc2 (including)
Linux_kernel Linux 2.6.8-rc3 (including) 2.6.8-rc3 (including)
Linux_kernel Linux 2.6.8.1 (including) 2.6.8.1 (including)
Linux_kernel Linux 2.6.8.1.5 (including) 2.6.8.1.5 (including)
Linux_kernel Linux 2.6.9-2.6.20 (including) 2.6.9-2.6.20 (including)
Linux_kernel Linux 2.6.10 (including) 2.6.10 (including)
Linux_kernel Linux 2.6.10-rc2 (including) 2.6.10-rc2 (including)
Linux_kernel Linux 2.6.11 (including) 2.6.11 (including)
Linux_kernel Linux 2.6.11-rc2 (including) 2.6.11-rc2 (including)
Linux_kernel Linux 2.6.11-rc3 (including) 2.6.11-rc3 (including)
Linux_kernel Linux 2.6.11-rc4 (including) 2.6.11-rc4 (including)
Linux_kernel Linux 2.6.11.1 (including) 2.6.11.1 (including)
Linux_kernel Linux 2.6.11.2 (including) 2.6.11.2 (including)
Linux_kernel Linux 2.6.11.3 (including) 2.6.11.3 (including)
Linux_kernel Linux 2.6.11.4 (including) 2.6.11.4 (including)
Linux_kernel Linux 2.6.11.5 (including) 2.6.11.5 (including)
Linux_kernel Linux 2.6.11.6 (including) 2.6.11.6 (including)
Linux_kernel Linux 2.6.11.7 (including) 2.6.11.7 (including)
Linux_kernel Linux 2.6.11.8 (including) 2.6.11.8 (including)
Linux_kernel Linux 2.6.11_rc1_bk6 (including) 2.6.11_rc1_bk6 (including)
Linux_kernel Linux 2.6.12-rc1 (including) 2.6.12-rc1 (including)
Linux_kernel Linux 2.6.12-rc4 (including) 2.6.12-rc4 (including)
Linux_kernel Linux 2.6_test9_cvs (including) 2.6_test9_cvs (including)
Kernel-source-2.4.27 Ubuntu dapper *
Kernel-source-2.4.27 Ubuntu edgy *
Linux-source-2.6.15 Ubuntu dapper *
Linux-source-2.6.17 Ubuntu edgy *

Potential Mitigations

References