Strix
26.1K

CVE-2005-0003

UnknownEPSS 0.51%

Last modified

CVE-2005-0003 is a vulnerability of currently unknown severity. The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.. EPSS estimates a 0.51% chance of exploitation in the next 30 days.

Description

The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.

Metrics

EPSS Probability
0.51%

39.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
AvayaMn100All versions—
AvayaNetwork RoutingAll versions—
AvayaConverged Communications Server2.0—
AvayaS8710r2.0.0—
AvayaS8710r2.0.1—
AvayaModular Messaging Message Storage Server1.1—
AvayaModular Messaging Message Storage Server2.0—
LinuxLinux Kernel2.4.0—
LinuxLinux Kernel2.4.1—
LinuxLinux Kernel2.4.2—
LinuxLinux Kernel2.4.3—
LinuxLinux Kernel2.4.4—
LinuxLinux Kernel2.4.5—
LinuxLinux Kernel2.4.6—
LinuxLinux Kernel2.4.7—
LinuxLinux Kernel2.4.8—
LinuxLinux Kernel2.4.9—
LinuxLinux Kernel2.4.10—
LinuxLinux Kernel2.4.11—
LinuxLinux Kernel2.4.12—
LinuxLinux Kernel2.4.13—
LinuxLinux Kernel2.4.14—
LinuxLinux Kernel2.4.15—
LinuxLinux Kernel2.4.16—
LinuxLinux Kernel2.4.17—
LinuxLinux Kernel2.4.18—
LinuxLinux Kernel2.4.19—
LinuxLinux Kernel2.4.20—
LinuxLinux Kernel2.4.21—
LinuxLinux Kernel2.4.22—
LinuxLinux Kernel2.4.23—
LinuxLinux Kernel2.4.23_ow2—
LinuxLinux Kernel2.4.24—
LinuxLinux Kernel2.4.24_ow1—
LinuxLinux Kernel2.4.25—
LinuxLinux Kernel2.4.26—
LinuxLinux Kernel2.4.27—
LinuxLinux Kernel2.4.28—
LinuxLinux Kernel2.4.29Rc1
MandrakesoftMandrake Linux9.2—
MandrakesoftMandrake Linux10.0—
MandrakesoftMandrake Linux10.1—
MandrakesoftMandrake Linux Corporate Server2.1—
MandrakesoftMandrake Linux Corporate Server3.0—
RedhatEnterprise Linux3.0—
RedhatEnterprise Linux Desktop3.0—
AvayaIntuity AudixAll versions—
MandrakesoftMandrake Multi Network Firewall8.2—
AvayaS8300r2.0.0—
AvayaS8300r2.0.1—

Showing 50 of 54 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2005-0003?
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.
How severe is CVE-2005-0003?
Severity scoring for CVE-2005-0003 is pending analysis. The EPSS model estimates a 0.51% probability of exploitation in the next 30 days.
How do I fix CVE-2005-0003?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-0003?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST