CVE-2005-3181 — Missing Release of Memory after Effective Lifetime in Kernel
Severity
2.1LOWNVD
EPSS
0.2%
top 64.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 12
Latest updateMay 1
Description
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
CVSS vector
AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9
Affected Packages2 packages
Also affects: Debian Linux 3.1, Ubuntu Linux 4.10, 5.04