Deskripsi CVE

Linux kernel 2.6.10 and 2.6.11rc1-bk6 uses different size types for offset arguments to the proc_file_read and locks_read_proc functions, which leads to a heap-based buffer overflow when a signed comparison causes negative integers to be used in a positive context.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	2.1		AV:L/AC:L/Au:N/C:P/I:N/A:N	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Linux>>Linux_kernel >> Version 2.6.10

Linux>>Linux_kernel >> Version 2.6.11_rc1_bk6

Referensi

http://marc.info/?l=bugtraq&m=111091402626556&w=2
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.redhat.com/support/errata/RHSA-2005-366.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.novell.com/linux/security/advisories/2005_18_kernel.html
Tags : vendor-advisory, x_refsource_SUSE

http://linux.bkbits.net:8080/linux-2.6/cset%404201818eC6aMn0x3GY_9rw3ueb2ZWQ
Tags : x_refsource_CONFIRM

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8994
Tags : vdb-entry, signature, x_refsource_OVAL

http://marc.info/?l=full-disclosure&m=110846727602817&w=2
Tags : mailing-list, x_refsource_FULLDISC

http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
Tags : vendor-advisory, x_refsource_CONECTIVA

http://www.guninski.com/where_do_you_want_billg_to_go_today_3.html
Tags : x_refsource_MISC

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.1%	–	–
2022-02-27	–	–	1.1%	–	–
2022-04-03	–	–	1.1%	–	–
2022-04-10	–	–	1.1%	–	–
2022-07-03	–	–	1.1%	–	–
2022-09-25	–	–	1.1%	–	–
2023-02-05	–	–	1.28%	–	–
2023-02-19	–	–	1.1%	–	–
2023-03-12	–	–	–	0.07%	–
2023-10-29	–	–	–	0.07%	–
2023-12-03	–	–	–	0.07%	–
2024-02-04	–	–	–	0.06%	–
2024-03-31	–	–	–	0.06%	–
2024-06-02	–	–	–	0.06%	–
2024-06-23	–	–	–	0.06%	–
2024-08-04	–	–	–	0.06%	–
2024-08-11	–	–	–	0.06%	–
2024-11-03	–	–	–	0.06%	–
2025-01-12	–	–	–	0.06%	–
2025-01-19	–	–	–	0.06%	–
2025-03-16	–	–	–	0.06%	–
2025-03-18	–	–	–	–	0.08%
2025-04-15	–	–	–	–	0.08%
2025-07-06	–	–	–	–	0.08%
2025-07-08	–	–	–	–	0.08%
2025-07-14	–	–	–	–	0.08%
2025-07-16	–	–	–	–	0.08%
2025-07-17	–	–	–	–	0.08%
2025-07-26	–	–	–	–	0.08%
2025-07-27	–	–	–	–	0.08%
2025-08-01	–	–	–	–	0.08%
2025-08-04	–	–	–	–	0.08%
2025-09-18	–	–	–	–	0.08%
2025-09-21	–	–	–	–	0.08%
2025-09-23	–	–	–	–	0.08%
2025-10-06	–	–	–	–	0.08%
2025-11-18	–	–	–	–	0.08%
2025-11-21	–	–	–	–	0.08%
2026-01-19	–	–	–	–	0.12%
2026-02-22	–	–	–	–	0.12%

Tanggal	Persentil
2022-02-06	29%
2022-02-27	3%
2022-04-03	5%
2022-04-10	51%
2022-07-03	52%
2022-09-25	53%
2023-02-05	68%
2023-02-19	54%
2023-03-12	3%
2023-10-29	31%
2023-12-03	3%
2024-02-04	24%
2024-03-31	25%
2024-06-02	26%
2024-06-23	27%
2024-08-04	26%
2024-08-11	27%
2024-11-03	28%
2025-01-12	29%
2025-01-19	29%
2025-03-16	3%
2025-03-18	22%
2025-04-15	26%
2025-07-06	25%
2025-07-08	26%
2025-07-14	25%
2025-07-16	26%
2025-07-17	25%
2025-07-26	26%
2025-07-27	25%
2025-08-01	26%
2025-08-04	25%
2025-09-18	26%
2025-09-21	25%
2025-09-23	26%
2025-10-06	25%
2025-11-18	21%
2025-11-21	25%
2026-01-19	32%
2026-02-22	31%

CVE-2005-0529 : Detail

CVE-2005-0529