CVE-2005-3273
N/A
Published: October 20, 2005 at 04:00 AM UTC
Updated: June 16, 2026 at 10:16 PM UTC
1 product affected across 1 vendorLinux Kernel
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
The rose_rt_ioctl function in rose_route.c for Radionet Open Source Environment (ROSE) in Linux 2.6 kernels before 2.6.12, and 2.4 before 2.4.29, does not properly verify the ndigis argument for a new route, which allows attackers to trigger array out-of-bounds errors with a large number of digipeats.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.4.02.4.0 test12.4.0 test102.4.0 test112.4.0 test122.4.0 test22.4.0 test32.4.0 test42.4.0 test52.4.0 test62.4.0 test72.4.0 test82.4.0 test92.4.12.4.102.4.112.4.122.4.132.4.142.4.152.4.162.4.172.4.182.4.18 pre12.4.18 pre22.4.18 pre32.4.18 pre42.4.18 pre52.4.18 pre62.4.18 pre72.4.18 pre82.4.192.4.19 pre12.4.19 pre22.4.19 pre32.4.19 pre42.4.19 pre52.4.19 pre62.4.22.4.202.4.212.4.21 pre12.4.21 pre42.4.21 pre72.4.222.4.232.4.23 pre92.4.23_ow22.4.242.4.24_ow12.4.252.4.262.4.272.4.27 pre12.4.27 pre22.4.27 pre32.4.27 pre42.4.27 pre52.4.282.4.292.4.29 rc12.4.29 rc22.4.32.4.42.4.52.4.62.4.72.4.82.4.92.6.02.6.12.6.1 rc12.6.1 rc22.6.1 rc32.6.102.6.10 rc12.6.10 rc22.6.10 rc32.6.112.6.11 rc12.6.11 rc22.6.11 rc32.6.11 rc42.6.11 rc52.6.11.12.6.11.102.6.11.112.6.11.122.6.11.22.6.11.32.6.11.42.6.11.52.6.11.62.6.11.72.6.11.82.6.11.92.6.22.6.2 rc12.6.2 rc22.6.2 rc32.6.32.6.3 rc12.6.3 rc22.6.3 rc32.6.3 rc42.6.42.6.4 rc12.6.4 rc22.6.4 rc32.6.52.6.5 rc12.6.5 rc22.6.5 rc32.6.62.6.6 rc12.6.6 rc22.6.6 rc32.6.72.6.7 rc12.6.7 rc22.6.7 rc32.6.82.6.8 rc12.6.8 rc22.6.8 rc32.6.8 rc42.6.8.12.6.92.6.9 rc12.6.9 rc22.6.9 rc32.6.9 rc4
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (18)
x_refsource_CONFIRM
Source: [email protected]
http://linux.bkbits.net:8080/linux-2.4/cset%4041e2cf515TpixcVQ8q8HvQvCv9E6zAx_refsource_CONFIRM
Source: [email protected]
http://linux.bkbits.net:8080/linux-2.6/cset%40423114bcdthRtmtdS6MsZiBVvteGCgThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/17826Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/18056Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/21035Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2005/dsa-922Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card