CVE-2005-0400

Description

The ext2_make_empty function call in the Linux kernel before 2.6.11.6 does not properly initialize memory when creating a block for a new directory entry, which allows local users to obtain potentially sensitive information by reading the block.

2.1

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.09%

Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory arkoon.net

Affected: n/a n/a

References

Link	Tags
http://arkoon.net/advisories/ext2-make-empty-leak.txt	vendor advisory
http://secunia.com/advisories/18684	third party advisory
http://www.redhat.com/support/errata/RHSA-2005-366.html	vendor advisory
http://secunia.com/advisories/14713/	third party advisory
https://usn.ubuntu.com/103-1/	vendor advisory
http://www.redhat.com/support/errata/RHSA-2006-0190.html	vendor advisory
http://marc.info/?l=bugtraq&m=111238764720696&w=2	mailing list
http://secunia.com/advisories/17002	third party advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10336	vdb entry signature
https://exchange.xforce.ibmcloud.com/vulnerabilities/19866	vdb entry
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.6
http://www.redhat.com/support/errata/RHSA-2005-663.html	vendor advisory
http://www.vupen.com/english/advisories/2005/1878	vdb entry
http://www.securityfocus.com/bid/12932	vdb entry
http://www.redhat.com/support/errata/RHSA-2006-0191.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2005-0400?: CVE-2005-0400 has been scored as a low severity vulnerability.
How to fix CVE-2005-0400?: To fix CVE-2005-0400, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-0400 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2005-0400 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.