NVD

Id
67492  
Name
CVE-2005-1768  
Description
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-07-11  
Modified Date
2016-10-17  
Seq
2005-1768  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
349582 67492 CVE-2005-1768 20060402-01-U  View
349583 67492 CVE-2005-1768 20050711 [ Suresec Advisories ] - Linux kernel ia32 compatibility (ia64/x86-64)  View
349584 67492 CVE-2005-1768 oval:org.mitre.oval:def:11117  View
349585 67492 CVE-2005-1768 1014442  View
349586 67492 CVE-2005-1768 DSA-921  View
349587 67492 CVE-2005-1768 SUSE-SA:2005:044  View
349588 67492 CVE-2005-1768 RHSA-2005:551  View
349589 67492 CVE-2005-1768 RHSA-2005:663  View
349590 67492 CVE-2005-1768 14205  View
349591 67492 CVE-2005-1768 http://www.suresec.org/advisories/adv4.pdf  View
349592 67492 CVE-2005-1768 ADV-2005-1878  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62218 JVNDB-2005-000420 Linux Kernel の execve() 関数における競合状態の脆弱性 Itanium (ia64) および AMD64 アーキテクチャにおける Linux Kernel には、execve() 関数のシステムコールのための互換コードに競合状態が発生する不備のため、特定の引数がユーザ空間からカーネル空間に引き渡される際に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-1768 12972 CVE-2005-1768 67492 3.7 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000420.html 2005-07-11 2007-04-01 View