CVE-2005-2708
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.8%
The search_binary_handler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service (panic), as demonstrated by running a process using the bash ulimit -v command.
Affected configurations
References
secunia.com/advisories/18523
secunia.com/advisories/18562
secunia.com/advisories/18684
www.redhat.com/support/errata/RHSA-2006-0140.html
www.redhat.com/support/errata/RHSA-2006-0190.html
www.securityfocus.com/archive/1/428028/100/0/threaded
www.securityfocus.com/archive/1/428058/100/0/threaded
www.securityfocus.com/bid/16320
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161925
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10649
Related
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.8%