PT-2005-1582 · Linux+1 · Linux Kernel+1

·

CVE-2005-0529

·

Publicado

2005-02-24

·

Atualizado

2023-02-13

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.10 through 2.6.11rc1-bk6
Description The issue arises from the Linux kernel using different size types for offset arguments to the proc file read and locks read proc functions. This discrepancy leads to a heap-based buffer overflow when a signed comparison results in negative integers being used in a positive context.
Recommendations For Linux kernel versions 2.6.10 through 2.6.11rc1-bk6, consider applying configuration changes to mitigate the risk of exploitation, such as restricting access to sensitive functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-0529
RHSA-2005:366
RHSA-2005_366

Produtos afetados

Linux Kernel
Red Hat