CVE-2005-1768
LowRace condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.
CVSS 2.0 score
3.7
AV:L/AC:H/Au:N/C:P/I:P/A:P
References
16 totalFrequently asked questions
-
What is CVE-2005-1768?
CVE-2005-1768 is a Low severity Linux kernel vulnerability with a CVSS score of 3.7 out of 10 . CVE-2005-1768 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2005-1768?
CVE-2005-1768 has a CVSS score of 3.7 out of 10, rated Low severity (CVSS 2.0). The vector string is
AV:L/AC:H/Au:N/C:P/I:P/A:P. -
Is there a patch available for CVE-2005-1768?
Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2005-1768 patch availability.
-
Is CVE-2005-1768 actively exploited?
No. CVE-2005-1768 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.