Memory corruption in Linux kernel - CVE-2005-0177
Published: March 7, 2005 / Updated: October 11, 2017
Vulnerability identifier: #VU95771
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2005-0177
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow.
Affected software
Linux kernel
How to mitigate CVE-2005-0177
Install update from vendor's repository.
External References
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
- http://linux.bkbits.net:8080/linux-2.6/cset@41e2bfbeOiXFga62XrBhzm7Kv9QDmQ
- http://marc.info/?l=full-disclosure&m=110846102231365&w=2
- http://www.redhat.com/support/errata/RHSA-2005-092.html
- http://www.securityfocus.com/bid/12598
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10298