CVE-2005-0736

Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d
http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html	Patch Vendor Advisory
http://www.novell.com/linux/security/advisories/2005_18_kernel.html	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-293.html
http://www.redhat.com/support/errata/RHSA-2005-366.html
http://www.securityfocus.com/bid/12763	Exploit Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870
https://usn.ubuntu.com/95-1/
http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d
http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html	Patch Vendor Advisory
http://www.novell.com/linux/security/advisories/2005_18_kernel.html	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-293.html
http://www.redhat.com/support/errata/RHSA-2005-366.html
http://www.securityfocus.com/bid/12763	Exploit Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870
https://usn.ubuntu.com/95-1/

Configurations

Configuration 1 (hide)

cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:linux:linux_kernel:2.6.0:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.1:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.2:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.3:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.4:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.5:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.6:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.7:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.8:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20::::::
	cpe:2.3:o:linux:linux_kernel:2.6.10:::::::*
	cpe:2.3:o:linux:linux_kernel:2.6.11:::::::*
	cpe:2.3:o:redhat:enterprise_linux:4.0::advanced_server:::::
	cpe:2.3:o:redhat:enterprise_linux:4.0::enterprise_server:::::
	cpe:2.3:o:redhat:enterprise_linux:4.0::workstation:::::
	cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:::::::*
	cpe:2.3:o:redhat:fedora_core:core_2.0:::::::*
	cpe:2.3:o:redhat:fedora_core:core_3.0:::::::*

History

20 Nov 2024, 23:55

Type	Values Removed	Values Added
References	~~() http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d -~~	() http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d -
References	~~() http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html - Patch, Vendor Advisory~~	() http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html - Patch, Vendor Advisory
References	~~() http://www.novell.com/linux/security/advisories/2005_18_kernel.html - Vendor Advisory~~	() http://www.novell.com/linux/security/advisories/2005_18_kernel.html - Vendor Advisory
References	~~() http://www.redhat.com/support/errata/RHSA-2005-293.html -~~	() http://www.redhat.com/support/errata/RHSA-2005-293.html -
References	~~() http://www.redhat.com/support/errata/RHSA-2005-366.html -~~	() http://www.redhat.com/support/errata/RHSA-2005-366.html -
References	~~() http://www.securityfocus.com/bid/12763 - Exploit, Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/12763 - Exploit, Patch, Vendor Advisory
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870 -
References	~~() https://usn.ubuntu.com/95-1/ -~~	() https://usn.ubuntu.com/95-1/ -

07 Nov 2023, 01:57

Type	Values Removed	Values Added
References	{'url': 'http://linux.bkbits.net:8080/linux-2.6/cset@422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html\|ChangeSet@-1d', 'name': 'http://linux.bkbits.net:8080/linux-2.6/cset@422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html\|ChangeSet@-1d', 'tags': ['Broken Link'], 'refsource': 'CONFIRM'}	() http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d -

Information

Published : 2005-03-09 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-0736

Mitre link : CVE-2005-0736

CVE.ORG link : CVE-2005-0736

JSON object : View

Products Affected

conectiva

linux

redhat

fedora_core
enterprise_linux
enterprise_linux_desktop

linux

linux_kernel

CWE

NVD-CWE-Other

{"id": "CVE-2005-0736", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-03-09T05:00:00.000", "references": [{"url": "http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d", "source": "cve@mitre.org"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2005-293.html", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2005-366.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/12763", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870", "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/95-1/", "source": "cve@mitre.org"}, {"url": "http://linux.bkbits.net:8080/linux-2.6/cset%40422dd06a1p5PsyFhoGAJseinjEq3ew?nav=index.html%7CChangeSet%40-1d", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032314.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.novell.com/linux/security/advisories/2005_18_kernel.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2005-293.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2005-366.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/12763", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9870", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/95-1/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "142BCD48-8387-4D0C-A052-44DD4144CBFF"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8220D81-9065-471F-9256-CFE7B9941555"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB445E3E-CCBD-4737-BE30-841B9A79D558"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5301E27-8021-467C-A9A2-AF2137EF0299"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79787868-2D77-4B55-AD61-C2B357CCE047"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FC53528-A67F-42DF-B8DA-778A65893F9D"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D90502F-EC45-4ADC-9428-B94346DA660B"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9440B25-D206-4914-9557-B5F030890DEC"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9933557-3BCA-4D92-AD4F-27758A0D3347"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10A60552-15A5-4E95-B3CE-99A4B26260C1"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D74A418-50F0-42C0-ABBC-BBBE718FF025"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6996B14-925B-46B8-982F-3545328B506B"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC80CF67-C51D-442C-9526-CFEDE84A6304"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

2.1 /10