CVE-2005-0087 Security feature bypass in n/a
Disabling stack protection in the ALSA library facilitates arbitrary code execution if other vulnerabilities exist, requiring a patched library update.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2005-0087?
CVE-2005-0087 is a medium-severity vulnerability in Redhat Enterprise Linux, published on 15 Feb 2005.
Official description
The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.
Which versions are affected by CVE-2005-0087?
It affects 2 products.
Linux distribution packages (12)
alsa-lib Red Hat:enterprise_linux:4::as | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-devel Red Hat:enterprise_linux:4::as | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib Red Hat:enterprise_linux:4::es | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-devel Red Hat:enterprise_linux:4::es | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.6-5.RHEL4 |
alsa-lib-devel Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.6-5.RHEL4 |
Products include Alsa-Project Alsa-Lib, Redhat Enterprise Linux.
How do I fix CVE-2005-0087?
Apply the vendor's patch.
Is CVE-2005-0087 being exploited?
There is no known exploitation of CVE-2005-0087 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2005-0087, GHSA-6mvg-c283-q7q6, RHSA-2005:033.