CVE-2005-0086 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Redhat Enterprise Linux
6 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 2
Latest updateMay 1
Description
Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4
Affected Packages2 packages
Also affects: Enterprise Linux 3.0
🔴Vulnerability Details
1GHSA▶
GHSA-gv3h-5v7c-44c6: Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute↗2022-05-01