NULL pointer dereference in Linux Kernel
CVE-2005-2459
The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.
EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.6.0, 2.6.1, 2.6.2
- Debian Debian_linux — versions 3.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, Broken Link, x_refsource_SUSE)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (Permissions Required, x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)