PT-2005-1771 · Linux+1 · Linux Kernel+1

Published 2005-03-09 · Updated 2018-10-03 · CVE-2005-0736

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6 to 2.6.11

Description The issue is related to an integer overflow in the sys epoll wait function in eventpoll.c. This allows local users to overwrite kernel memory by providing a large number of events.

Recommendations For Linux kernel versions 2.6 to 2.6.11, update to a version outside of this range to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-0736

RHSA-2005:293

RHSA-2005:366

RHSA-2005_293

RHSA-2005_366

Affected Products

Linux Kernel

Red Hat

References · 409

• 🔥 http://securityfocus.com/bid/12763 · Exploit
• 🔥 https://exploit-db.com/exploits/1397 · Exploit
• 🔥 https://exploit-db.com/exploits/25202 · Exploit
• https://bdu.fstec.ru/vul/2015-03204 · Security Note
• https://bdu.fstec.ru/vul/2015-03194 · Security Note
• https://bdu.fstec.ru/vul/2015-02367 · Security Note
• https://bdu.fstec.ru/vul/2015-03181 · Security Note
• https://bdu.fstec.ru/vul/2015-02314 · Security Note
• https://bdu.fstec.ru/vul/2015-01382 · Security Note
• https://bdu.fstec.ru/vul/2015-02360 · Security Note
• https://bdu.fstec.ru/vul/2015-02256 · Security Note
• https://bdu.fstec.ru/vul/2015-02240 · Security Note
• https://bdu.fstec.ru/vul/2015-02293 · Security Note
• https://bdu.fstec.ru/vul/2015-01375 · Security Note
• https://bdu.fstec.ru/vul/2015-03169 · Security Note