PT-2005-5609 · Linux+1 · Linux Kernel+1

Published 1970-01-01 · Updated 2018-10-19 · CVE-2005-3805

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.10 through 2.6.14 SUSE Linux Enterprise (affected versions not specified)

Description A locking problem in POSIX timer cleanup handling on exit in the Linux kernel, when running on SMP systems, allows local users to cause a denial of service involving process CPU timers. Multiple vulnerabilities in SUSE Linux Enterprise packages may lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited locally.

Recommendations For Linux kernel versions 2.6.10 through 2.6.14, consider applying a patch to fix the locking problem in POSIX timer cleanup handling. For SUSE Linux Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-04239

BDU:2015-04240

BDU:2015-04241

CVE-2005-3805

Affected Products

Linux Kernel

Suse Linux Enterprise

References · 15

• https://bdu.fstec.ru/vul/2015-04239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-3805 · Security Note
• http://securityfocus.com/archive/1/419522/100/0/threaded · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04241 · Security Note
• https://bdu.fstec.ru/vul/2015-04240 · Security Note
• http://securityfocus.com/advisories/9806 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:018 · Vendor Advisory
• https://usn.ubuntu.com/231-1 · Vendor Advisory
• http://securityfocus.com/archive/1/427981/100/0/threaded · Vendor Advisory
• http://secunia.com/advisories/17917 · Note
• http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25f407f0b668f5e4ebd5d13e1fb4306ba6427ead · Note
• https://suse.com/support/security/advisories/2005_68_kernel.html · Note
• http://secunia.com/advisories/17918 · Note
• http://securityfocus.com/bid/15722 · Note
• http://secunia.com/advisories/18203 · Note