CVE-2005-3275

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-21 · updated 2026-06-16

Description

The NAT code (1) ip_nat_proto_tcp.c and (2) ip_nat_proto_udp.c in Linux kernel 2.6 before 2.6.13 and 2.4 before 2.4.32-rc1 incorrectly declares a variable to be static, which allows remote attackers to cause a denial of service (memory corruption) by causing two packets for the same protocol to be NATed at the same time, which leads to memory corruption.

Affected products

Linux kernel: 2.4.0-test1, 2.4.0-test10, 2.4.0-test11, 2.4.0-test12, 2.4.0-test2, 2.4.0-test3 (+96)

References

http://linux.bkbits.net:8080/linux-2.6/cset%4042e14e05d0V1d88nZlaIX1F9dCRApA
http://secunia.com/advisories/17826
http://secunia.com/advisories/17918
http://secunia.com/advisories/18056
http://secunia.com/advisories/18059
http://secunia.com/advisories/18562
http://secunia.com/advisories/18684
http://secunia.com/advisories/18977
http://secunia.com/advisories/19185
http://secunia.com/advisories/19607
http://www.debian.org/security/2005/dsa-921

Get alerted when CVE-2005-3275 or the next vulnerability affects your stack