Published: 25/11/2005 Updated: 03/10/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.11.2
linux linux kernel 2.6.11.3
linux linux kernel 2.6.12.1
linux linux kernel 2.6.12.2
linux linux kernel 2.6.13.2
linux linux kernel 2.6.13.3
linux linux kernel 2.6.11
linux linux kernel 2.6.11.4
linux linux kernel 2.6.11.5
linux linux kernel 2.6.12.3
linux linux kernel 2.6.12.4
linux linux kernel 2.6.13.4
linux linux kernel 2.6.14
linux linux kernel 2.6.11.1
linux linux kernel 2.6.11.10
linux linux kernel 2.6.11.6
linux linux kernel 2.6.11.7
linux linux kernel 2.6.11.8
linux linux kernel 2.6.12.5
linux linux kernel 2.6.12.6
linux linux kernel 2.6.11.11
linux linux kernel 2.6.11.12
linux linux kernel 2.6.11.9
linux linux kernel 2.6.12
linux linux kernel 2.6.13
linux linux kernel 2.6.13.1

Rudolf Polzer reported an abuse of the ‘loadkeys’ command By redefining one or more keys and tricking another user (like root) into logging in on a text console and typing something that involves the redefined keys, a local user could cause execution of arbitrary commands with the privileges of the target user The updated kernel restrict ...

/* source: wwwsecurityfocuscom/bid/15846/info Linux kernel is prone to a local integer-overflow vulnerability A successful attack can result in a kernel crash Arbitrary code execution may be possible as well, but this has not been confirmed All 26x versions of the Linux kernel are considered vulnerable at the moment */ #define ...

NVD-CWE-Other http://seclists.org/lists/linux-kernel/2005/Nov/7839.html http://www.kernel.org/hg/linux-2.6/?cs=6d5ffbb49406 http://www.securityfocus.com/advisories/9852 http://www.securityfocus.com/bid/15846 http://secunia.com/advisories/18203 http://www.novell.com/linux/security/advisories/2006_06_kernel.html http://secunia.com/advisories/18788 http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html http://secunia.com/advisories/19038 http://www.mandriva.com/security/advisories?name=MDKSA-2006:018 https://usn.ubuntu.com/231-1/https://usn.ubuntu.com/231-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/26811/

CVE-2005-3808

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect