// For flags

CVE-2005-4605

Linux Kernel < 2.6.14.6 - 'procfs' Kernel Memory Disclosure

Severity Score

2.1
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-12-31 CVE Published
  • 2006-01-03 CVE Reserved
  • 2009-08-05 First Exploit
  • 2023-03-08 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (25)
URL Tag Source
http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ X_refsource_confirm
http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ X_refsource_confirm
http://marc.info/?l=full-disclosure&m=113535380422339&w=2 Mailing List
http://secunia.com/advisories/18216 Third Party Advisory
http://secunia.com/advisories/18351 Third Party Advisory
http://secunia.com/advisories/18510 Third Party Advisory
http://secunia.com/advisories/18527 Third Party Advisory
http://secunia.com/advisories/18788 Third Party Advisory
http://secunia.com/advisories/19038 Third Party Advisory
http://secunia.com/advisories/19374 Third Party Advisory
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf X_refsource_confirm
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html X_refsource_confirm
http://www.securityfocus.com/bid/16284 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/23811 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747 Signature
URL Date SRC
https://www.exploit-db.com/exploits/9363 2009-08-05
URL Date SRC
URL Date SRC
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html 2023-02-13
http://www.debian.org/security/2006/dsa-1017 2023-02-13
http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 2023-02-13
http://www.novell.com/linux/security/advisories/2006_06_kernel.html 2023-02-13
http://www.redhat.com/support/errata/RHSA-2006-0101.html 2023-02-13
http://www.securityfocus.com/archive/1/427981/100/0/threaded 2023-02-13
https://usn.ubuntu.com/244-1 2023-02-13
https://access.redhat.com/security/cve/CVE-2005-4605 2006-01-17
https://bugzilla.redhat.com/show_bug.cgi?id=1617860 2006-01-17
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.14
Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"
rc1
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.14
Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"
rc2
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.14
Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"
rc3
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.14
Search vendor "Linux" for product "Linux Kernel" and version "2.6.14"
rc4
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.14.3
Search vendor "Linux" for product "Linux Kernel" and version "2.6.14.3"
-
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.15
Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"
rc1
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.15
Search vendor "Linux" for product "Linux Kernel" and version "2.6.15"
rc3
Affected