low2.1Public exploit code
CVE-2005-4605
The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in wh…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel < 2.6.14.6 - 'procfs' Kernel Memory Disclosure2009-08-05 · local · linux · Verified
Impact
The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive kernel memory via unspecified vectors in which a signed value is added to an unsigned value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Versions 2.6.14, 2.6.14.3, 2.6.15 |
References
- NVD record
- CVE.org record
- http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ
- http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ
- http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html
- http://marc.info/?l=full-disclosure&m=113535380422339&w=2
- http://secunia.com/advisories/18216
- http://secunia.com/advisories/18351
- http://secunia.com/advisories/18510
- http://secunia.com/advisories/18527
- http://secunia.com/advisories/18788
- http://secunia.com/advisories/19038
- http://secunia.com/advisories/19374
- http://www.debian.org/security/2006/dsa-1017
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8b90db0df7187a01fb7177f1f812123138f562cf
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:040
- http://www.novell.com/linux/security/advisories/2006_06_kernel.html
- http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00014.html
- http://www.redhat.com/support/errata/RHSA-2006-0101.html
- http://www.securityfocus.com/archive/1/427981/100/0/threaded
- http://www.securityfocus.com/bid/16284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23811
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11747
- https://usn.ubuntu.com/244-1/
- http://linux.bkbits.net:8080/linux-2.6/cset%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ
- http://linux.bkbits.net:8080/linux-2.6/gnupatch%4043b562ae6hJGLWZA4TNf2k-RzXnVlQ
- http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html