CVE-2005-3272

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-21 · updated 2026-06-16

Description

Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.

Affected products

Linux kernel: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 (+19)

References

http://linux.bkbits.net:8080/linux-2.6/cset%40429a310bRFOXOmZvKaGXW8A5Qd9F1A
http://secunia.com/advisories/18056
http://secunia.com/advisories/20237
http://secunia.com/advisories/21745
http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
http://www.debian.org/security/2005/dsa-922
http://www.mandriva.com/security/advisories?name=MDKSA-2007:025
http://www.redhat.com/support/errata/RHSA-2006-0493.html
http://www.securityfocus.com/bid/15536
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10157
https://usn.ubuntu.com/219-1/
http://linux.bkbits.net:8080/linux-2.6/cset%40429a310bRFOXOmZvKaGXW8A5Qd9F1A

Get alerted when CVE-2005-3272 or the next vulnerability affects your stack