CVE-2005-0736 Integer overflow in n/a
Local attackers can exploit an integer overflow in the Linux kernel's epoll implementation to overwrite memory and escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0736?
CVE-2005-0736 is a low-severity vulnerability in Conectiva Linux, published on 13 Mar 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events.
Which versions are affected by CVE-2005-0736?
It affects 5 products.
Products include Conectiva Linux, Linux kernel, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Fedora Core.
How do I fix CVE-2005-0736?
Apply the vendor's patch.
Is CVE-2005-0736 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-0736 exists.
Public exploit code: 2 Exploit-DB entries and 1 proofs of concept on GitHub.
Other vulnerabilities in Conectiva Linux
Sources
Also known as CVE-2005-0728, GHSA-3279-jg8p-4jv6.