Description
Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1017-1 | New Linux kernel 2.6.8 packages fix several vulnerabilities |
Debian DSA |
DSA-1018-1 | New Linux kernel 2.4.27 packages fix several vulnerabilities |
Debian DSA |
DSA-1018-2 | New Linux kernel 2.4.27 packages fix several vulnerabilities |
EUVD |
EUVD-2005-4613 | Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly cause a denial of service via a long string, which causes sysctl to write a zero byte outside the buffer. NOTE: since the sysctl is called from a userland program that provides the argument, this might not be a vulnerability, unless a legitimate user-assisted or setuid scenario can be identified. |
Ubuntu USN |
USN-244-1 | Linux kernel vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T23:53:27.796Z
Reserved: 2006-01-05T00:00:00.000Z
Link: CVE-2005-4618
No data.
Status : Modified
Published: 2005-12-31T05:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2005-4618
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN