7.2
CVSSv2

CVE-2005-1264

Published: 17/05/2005 Updated: 19/10/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel 2.6.0

linux linux kernel 2.6.4

linux linux kernel 2.6.5

linux linux kernel 2.6.8

linux linux kernel 2.6.2

linux linux kernel 2.6.3

linux linux kernel 2.6.1

linux linux kernel 2.6.7

linux linux kernel 2.6.6

linux linux kernel 2.6.9

linux linux kernel 2.6_test9_cvs

Vendor Advisories

Synopsis Updated kernel packages available for Red Hat Enterprise Linux 4 Update 1 Type/Severity Security Advisory: Important Topic Updated kernel packages are now available as part of ongoing supportand maintenance of Red Hat Enterprise Linux version 4 This is thefirst regular update[Updated 9 August 20 ...
Colin Percival discovered an information disclosure in the “Hyper Threading Technology” architecture in processors which are capable of simultaneous multithreading (in particular Intel Pentium 4, Intel Mobile Pentium 4, and Intel Xeon processors) This allows a malicious thread to monitor the execution of another thread on the same CPU This co ...