NVD

Id
65945  
Name
CVE-2005-0180  
Description
Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-03-07  
Modified Date
2016-11-18  
Seq
2005-0180  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343550 65945 CVE-2005-0180 CLA-2005:930  View
343551 65945 CVE-2005-0180 20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories  View
343552 65945 CVE-2005-0180 oval:org.mitre.oval:def:10667  View
343553 65945 CVE-2005-0180 MDKSA-2005:218  View
343554 65945 CVE-2005-0180 RHSA-2005:092  View
343555 65945 CVE-2005-0180 20050107 grsecurity 2.1.0 release / 5 Linux kernel advisories  View
343556 65945 CVE-2005-0180 12198  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61804 JVNDB-2005-000006 Linux Kernel の sg_scsi_ioctl() 関数における整数オーバフローの脆弱性 ------------ CVE-2005-0180 11384 CVE-2005-0180 65945 3.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000006.html 2005-01-06 2007-04-01 View