QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-2098

Back to search

CVE-2005-2098

Published: Aug 22, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-169-1
vendor-advisory
x_refsource_UBUNTU
14521
vdb-entry
x_refsource_BID
MDKSA-2005:220
vendor-advisory
x_refsource_MANDRAKE
17073
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:9638
vdb-entry
signature
x_refsource_OVAL
RHSA-2005:514
vendor-advisory
x_refsource_REDHAT
FLSA:157459-3
vendor-advisory
x_refsource_FEDORA
16355
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now