VDB
CVE-2005-4618
CVE-2005-4618
PUBLISHED
CVSS 3.5999999046325684 LOW
Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.
EPSS 0.45% · 36.9th percentile
Risk Scores
CVSS 2.0
3.5999999046325684
EPSS Score
0.45%
36.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| linux | linux_kernel | 2.6.0, 2.6.0, 2.6.0 |
Timeline
- Dec 31, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score
References
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c url
- MDKSA-2006:040 vendor-advisory
- DSA-1018 vendor-advisory
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15 url
- 19369 third-party-advisory
- ADV-2006-0035 vdb
- 18216 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2005-4618 advisory
- https://usn.ubuntu.com/244-1 url
- http://secunia.com/advisories/18527 url
- http://secunia.com/advisories/19374 url
- http://www.debian.org/security/2006/dsa-1017 url
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8febdd85adaa41fa1fc1cb31286210fc2cd3ed0c url
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15 url
- http://www.securityfocus.com/bid/16141 url
- https://usn.ubuntu.com/244-1/ technical