Denial of Service Vulnerability in Linux Kernel - CVE-2005-3660
Summary
DEBIAN-CVE-2005-3660: Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected file descriptors or socketpairs and setting a large data transfer buffer, then... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used in various distributions, including Debian. The kernel's functionality includes process management, memory management, device drivers, and system calls. This vulnerability affects multiple versions of the Linux kernel, making it critical for users to be aware of its implications.
Vulnerability Detail
CVE-2005-3660 is a vulnerability in the Linux kernel versions 2.4 and 2.6 that allows attackers to cause a denial of service (DoS) by exhausting memory resources. This is achieved by creating numerous connected file descriptors or socket pairs, setting large data transfer buffers, and then preventing the kernel from completing data transfers. This can lead to system instability, memory exhaustion, and potential kernel panic, rendering the system unresponsive.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the number of file descriptors or socket pairs that can be created by processes. This can be done by adjusting system limits in the '/etc/security/limits.conf' file. For example, adding the following lines can help mitigate the risk: '* soft nofile 1024' and '* hard nofile 2048'.
Conclusion
CVE-2005-3660 is a significant vulnerability in the Linux kernel that can lead to denial of service. Users are encouraged to update their systems to mitigate the risks associated with this vulnerability. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2005-3660 is a vulnerability in the Linux kernel that can lead to denial of service due to memory exhaustion.
The vulnerability affects Linux kernel versions 2.4 and 2.6.
Exploitation of this vulnerability can result in system instability, memory exhaustion, and kernel panic.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
You should update your Linux kernel to a patched version using the provided update commands.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
