Vulnerability in Conectiva Linux
CVE-2005-0736
Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
EPSS: 0.021 (79.1th percentile) — read the EPSS interpretation.
Affected products
- Conectiva Linux — versions 10.0
- Linux Linux_kernel — versions 2.6.0, 2.6.1, 2.6.2
- Redhat Enterprise_linux — versions 4.0
- Redhat Enterprise_linux_desktop — versions 4.0
- Redhat Fedora_core — versions core_2.0, core_3.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, Patch, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
Frequently asked questions
- What is CVE-2005-0736?
- CVE-2005-0736 is a vulnerability in Conectiva Linux. Published 2005-03-09.
- Is CVE-2005-0736 known to be exploited?
- 41 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.