SB2005093003 - Race condition in Linux kernel



SB2005093003 - Race condition in Linux kernel

Published: September 30, 2005

Security Bulletin ID SB2005093003
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Race condition (CVE-ID: CVE-2005-3110)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

Race condition in ebtables netfilter module (ebtables.c) in Linux 2.6, when running on an SMP system that is operating under a heavy load, might allow remote attackers to cause a denial of service (crash) via a series of packets that cause a value to be modified after it has been read but before it has been locked.


Remediation

Install update from vendor's website.