PT-2005-1582 · Linux+1 · Linux Kernel+1

Georgi Guninski

·

Published

2005-02-24

·

Updated

2023-02-13

·

CVE-2005-0529

CVSS v2.0

2.1

Low

VectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.10 through 2.6.11rc1-bk6
Description The issue arises from the Linux kernel using different size types for offset arguments to the proc file read and locks read proc functions. This discrepancy leads to a heap-based buffer overflow when a signed comparison results in negative integers being used in a positive context.
Recommendations For Linux kernel versions 2.6.10 through 2.6.11rc1-bk6, consider applying configuration changes to mitigate the risk of exploitation, such as restricting access to sensitive functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0529
RHSA-2005:366
RHSA-2005_366

Affected Products

Linux Kernel
Red Hat