CVE-2005-2459

Description

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Weakness classification

• CWE-476: NULL Pointer Dereference

Primary references

• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org
• cve@mitre.org