CVE-2005-1264

Exploit

EPSS 0.53%
Veröffentlicht 17.05.2005 04:00:00
Zuletzt bearbeitet 16.06.2026 22:12:44
Erkennungen
Login

Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space, a similar vulnerability to CVE-2005-1589.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 29 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version 2.6.0

Linux ≫ Linux Kernel Version 2.6.0 Update test1

Linux ≫ Linux Kernel Version 2.6.0 Update test10

Linux ≫ Linux Kernel Version 2.6.0 Update test11

Linux ≫ Linux Kernel Version 2.6.0 Update test2

Linux ≫ Linux Kernel Version 2.6.0 Update test3

Linux ≫ Linux Kernel Version 2.6.0 Update test4

Linux ≫ Linux Kernel Version 2.6.0 Update test5

Linux ≫ Linux Kernel Version 2.6.0 Update test6

Linux ≫ Linux Kernel Version 2.6.0 Update test7

Linux ≫ Linux Kernel Version 2.6.0 Update test8

Linux ≫ Linux Kernel Version 2.6.0 Update test9

Linux ≫ Linux Kernel Version 2.6.1

Linux ≫ Linux Kernel Version 2.6.1 Update rc1

Linux ≫ Linux Kernel Version 2.6.1 Update rc2

Linux ≫ Linux Kernel Version 2.6.2

Linux ≫ Linux Kernel Version 2.6.3

Linux ≫ Linux Kernel Version 2.6.4

Linux ≫ Linux Kernel Version 2.6.5

Linux ≫ Linux Kernel Version 2.6.6

Linux ≫ Linux Kernel Version 2.6.6 Update rc1

Linux ≫ Linux Kernel Version 2.6.7

Linux ≫ Linux Kernel Version 2.6.7 Update rc1

Linux ≫ Linux Kernel Version 2.6.8

Linux ≫ Linux Kernel Version 2.6.8 Update rc1

Linux ≫ Linux Kernel Version 2.6.8 Update rc2

Linux ≫ Linux Kernel Version 2.6.8 Update rc3

Linux ≫ Linux Kernel Version 2.6.9 Update 2.6.20

Linux ≫ Linux Kernel Version 2.6_test9_cvs

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.408

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securityfocus.com/archive/1/427980/100/0/threaded

http://www.redhat.com/support/errata/RHSA-2005-420.html

http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0045.html

Patch

Vendor Advisory

Exploit

http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0046.html

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.10

http://marc.info/?l=linux-kernel&m=111630512512222

http://www.securityfocus.com/bid/13651

http://www.vupen.com/english/advisories/2005/0557

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10264

https://nvd.nist.gov/vuln/detail/CVE-2005-1264

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-1264

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-1264

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-1264