Vulnerability in Linux Kernel
CVE-2005-2490
Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.
EPSS: 0.006 (43.0th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.6.0, 2.6.1, 2.6.2
- N/a — versions n/a
References
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRAKE)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_FEDORA, vendor-advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_TRUSTIX)
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (x_refsource_FEDORA, vendor-advisory)
- secalert@redhat.com (x_refsource_CONFIRM)