CVE-2005-2492 — Ubuntu Linux vulnerability

CWE-2646 documents5 sources
Severity
3.6LOWNVD
EPSS
0.1%
top 78.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Canonical Ubuntu LinuxLinux KernelRedhat Enterprise Linux
Timeline
PublishedSep 14
Latest updateMay 1

Description

The raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a denial of service (change hardware state) or read from arbitrary memory via crafted input.

CVSS vector

AV:L/AC:L/C:P/I:N/A:PExploitability: 3.9 | Impact: 4.9

Affected Packages1 packages

▶NVDlinux/linux_kernel19 versions+18

Also affects: Ubuntu Linux 4.10, 5.04, Enterprise Linux 4.0

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-mqcr-733m-h5pc: The raw_sendmsg function in the Linux kernel 2↗2022-05-01
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2005-09-09
▶
Ubuntu
Linux kernel vulnerabilities↗2005-09-09
▶

💬Community

2
Bugzilla
CVE-2005-2492 security flaw↗2018-08-16
▶
Bugzilla
Multiple Kernel vulnerabilities↗2005-05-11
▶