The ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade um-host-kernelUpgrade kernel-sn2Upgrade kernel-smpUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-pseries64Upgrade kernel-umUpgrade kernel-pmac64Upgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade kernel-s390Upgrade um-host-install-initrdUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-iseries64 | Feb 17, 2015 | Sep 9, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub