CVEvulnerability
CVE-2005-1263
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local users to execute arbitrary code via an ELF binary that, in certain conditions involving the create_elf_tables function, causes a negative length argument to pass a signed integer comparison, leading to a buffer overflow.
Affected configurations
• linux linux kernel 2.2.0
• linux linux kernel 2.2.1
• linux linux kernel 2.2.2
• linux linux kernel 2.2.3
• linux linux kernel 2.2.4
• linux linux kernel 2.2.5
• linux linux kernel 2.2.6
• linux linux kernel 2.2.7
• linux linux kernel 2.2.8
• linux linux kernel 2.2.9
• linux linux kernel 2.2.10
• linux linux kernel 2.2.11
• linux linux kernel 2.2.12
• linux linux kernel 2.2.13
• linux linux kernel 2.2.14
• linux linux kernel 2.2.15
• linux linux kernel 2.2.16
• linux linux kernel 2.2.17
• linux linux kernel 2.2.18
• linux linux kernel 2.2.19
• linux linux kernel 2.2.20
• linux linux kernel 2.2.21
• linux linux kernel 2.2.22
• linux linux kernel 2.2.23
• linux linux kernel 2.2.24
• linux linux kernel 2.2.27
• linux linux kernel 2.4.0
• linux linux kernel 2.4.1
• linux linux kernel 2.4.2
• linux linux kernel 2.4.3
• linux linux kernel 2.4.4
• linux linux kernel 2.4.5
• linux linux kernel 2.4.6
• linux linux kernel 2.4.7
• linux linux kernel 2.4.8
• linux linux kernel 2.4.9
• linux linux kernel 2.4.10
• linux linux kernel 2.4.11
• linux linux kernel 2.4.12
• linux linux kernel 2.4.13
• linux linux kernel 2.4.14
• linux linux kernel 2.4.15
• linux linux kernel 2.4.16
• linux linux kernel 2.4.17
• linux linux kernel 2.4.18
• linux linux kernel 2.4.19
• linux linux kernel 2.4.20
• linux linux kernel 2.4.21
• linux linux kernel 2.4.22
• linux linux kernel 2.4.23
• linux linux kernel 2.4.23 ow2
• linux linux kernel 2.4.24
• linux linux kernel 2.4.24 ow1
• linux linux kernel 2.4.25
• linux linux kernel 2.4.26
• linux linux kernel 2.4.27
• linux linux kernel 2.4.28
• linux linux kernel 2.4.29
• linux linux kernel 2.4.30
• linux linux kernel 2.4.31
… and 14 more
References
- ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U patches.sgi.com
- http://secunia.com/advisories/19185 secunia.com
- http://secunia.com/advisories/19607 secunia.com
- http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt www.isec.pl
- http://www.redhat.com/support/errata/RHSA-2005-472.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-529.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-551.html www.redhat.com
- http://www.securityfocus.com/archive/1/397966 www.securityfocus.com
- http://www.securityfocus.com/archive/1/427980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428028/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428058/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/13589 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/0524 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10909 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U patches.sgi.com
- http://secunia.com/advisories/19185 secunia.com
- http://secunia.com/advisories/19607 secunia.com
- http://www.isec.pl/vulnerabilities/isec-0023-coredump.txt www.isec.pl
- http://www.redhat.com/support/errata/RHSA-2005-472.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-529.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-551.html www.redhat.com
- http://www.securityfocus.com/archive/1/397966 www.securityfocus.com
- http://www.securityfocus.com/archive/1/427980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428028/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428058/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/13589 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/0524 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10909 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1122 oval.cisecurity.org