The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-pmac64Upgrade kernel-smpUpgrade kernel-iseries64Upgrade kernel-s390Upgrade kernel-umUpgrade um-host-kernelUpgrade kernel-symsUpgrade kernel-pseries64Upgrade kernel-s390xUpgrade kernel-sn2Upgrade kernel-bigsmpUpgrade kernel-64k-pagesizeUpgrade um-host-install-initrdUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-debug | Feb 17, 2015 | Aug 23, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.10-5-powerpcUpgrade linux-image-2.6.10-5-k7Upgrade linux-image-2.6.8.1-5-k7-smpUpgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.10-5-itaniumUpgrade linux-image-2.6.10-5-k7-smpUpgrade linux-image-2.6.8.1-5-powerpcUpgrade linux-image-2.6.10-5-mckinley-smpUpgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.8.1-5-amd64-k8-smpUpgrade linux-image-2.6.10-5-686-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.10-5-amd64-k8Upgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-image-2.6.10-5-686Upgrade linux-image-2.6.10-5-itanium-smp | Nov 8, 2024 | Aug 23, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub