Vulnerability in Linux Kernel
CVE-2005-0529
Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.
EPSS: 0.005 (41.6th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.6.10, 2.6.11_rc1_bk6
- N/a — versions n/a
References
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (mailing-list, x_refsource_FULLDISC)
- secalert@redhat.com (vendor-advisory, x_refsource_CONECTIVA)
- secalert@redhat.com (Exploit, Patch, x_refsource_MISC)