CVE-2005-0180: Low severity Linux Linux kernel vulnerability
Multiple integer signedness errors in the sgscsiioctl function in scsiioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copyfromuser and copytouser functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0180?
CVE-2005-0180 is classified as a high severity vulnerability due to its potential for local users to access arbitrary kernel memory.
How do I fix CVE-2005-0180?
To fix CVE-2005-0180, upgrade the Linux kernel to a version that has patched the vulnerability, specifically versions later than the affected 2.6.x series.
Which versions are affected by CVE-2005-0180?
CVE-2005-0180 affects multiple versions of the Linux kernel, particularly versions 2.6.0 to 2.6.12-rc4.
What are the implications of CVE-2005-0180 for local users?
Local users can exploit CVE-2005-0180 to read or modify kernel memory, potentially leading to data leakage or privilege escalation.
Are there known exploits for CVE-2005-0180?
Yes, there are known proof-of-concept exploits for CVE-2005-0180 that demonstrate its potential for exploitation.