CVEvulnerability
CVE-2005-2490
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.
Affected configurations
• linux linux kernel 2.6.0
• linux linux kernel 2.6.1
• linux linux kernel 2.6.2
• linux linux kernel 2.6.3
• linux linux kernel 2.6.4
• linux linux kernel 2.6.5
• linux linux kernel 2.6.6
• linux linux kernel 2.6.7
• linux linux kernel 2.6.8
• linux linux kernel 2.6.9
• linux linux kernel 2.6.10
• linux linux kernel 2.6.11
• linux linux kernel 2.6.11.5
• linux linux kernel 2.6.11.6
• linux linux kernel 2.6.11.7
• linux linux kernel 2.6.11.8
• linux linux kernel 2.6.11.11
• linux linux kernel 2.6.12
• linux linux kernel 2.6 test9 cvs
References
- http://marc.info/?l=bugtraq&m=112690609622266&w=2 marc.info
- http://secunia.com/advisories/16747/ Patch, Vendor Advisory
- http://secunia.com/advisories/17002 secunia.com
- http://secunia.com/advisories/17073 secunia.com
- http://secunia.com/advisories/17826 secunia.com
- http://secunia.com/advisories/17918 secunia.com
- http://secunia.com/advisories/19374 secunia.com
- http://www.debian.org/security/2006/dsa-1017 www.debian.org
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1 www.kernel.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2005-514.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-663.html www.redhat.com
- http://www.securityfocus.com/archive/1/419522/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/427980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428028/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428058/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/14785 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-178-1 Vendor Advisory
- http://www.vupen.com/english/advisories/2005/1878 www.vupen.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22217 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481 oval.cisecurity.org
- http://marc.info/?l=bugtraq&m=112690609622266&w=2 marc.info
- http://secunia.com/advisories/16747/ Patch, Vendor Advisory
- http://secunia.com/advisories/17002 secunia.com
- http://secunia.com/advisories/17073 secunia.com
- http://secunia.com/advisories/17826 secunia.com
- http://secunia.com/advisories/17918 secunia.com
- http://secunia.com/advisories/19374 secunia.com
- http://www.debian.org/security/2006/dsa-1017 www.debian.org
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1 www.kernel.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:235 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2005-514.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-663.html www.redhat.com
- http://www.securityfocus.com/archive/1/419522/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/427980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428028/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/428058/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/14785 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-178-1 Vendor Advisory
- http://www.vupen.com/english/advisories/2005/1878 www.vupen.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22217 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481 oval.cisecurity.org