CVE-2005-1768: Buffer Overflow
Race condition in the ia32 compatibility code for the execve system call in Linux kernel 2.4 before 2.4.31 and 2.6 before 2.6.6 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a concurrent thread that increments a pointer count after the nargs function has counted the pointers, but before the count is copied from user space to kernel space, which leads to a buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1768?
CVE-2005-1768 has a medium severity rating due to the potential for denial of service and execution of arbitrary code.
How do I fix CVE-2005-1768?
To fix CVE-2005-1768, update the Linux kernel to version 2.4.31 or later, or 2.6.6 or later.
Who is affected by CVE-2005-1768?
CVE-2005-1768 affects local users running Linux kernel versions 2.4 before 2.4.31 and 2.6 before 2.6.6.
What kind of attack does CVE-2005-1768 allow?
CVE-2005-1768 allows attackers to cause a kernel panic and possibly execute arbitrary code through a race condition.
Is there a workaround for CVE-2005-1768?
There is no stable workaround; the most effective mitigation is to upgrade the affected kernel versions.