CVE-2005-2490

Description

Stack-based buffer overflow in the sendmsg function call in the Linux kernel 2.6 before 2.6.13.1 allows local users to execute arbitrary code by calling sendmsg and modifying the message contents in another thread.

4.6

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 0.14%

Vendor Advisory mandriva.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory securityfocus.com Vendor Advisory ubuntu.com Vendor Advisory marc.info Vendor Advisory securityfocus.com Vendor Advisory redhat.com Vendor Advisory securityfocus.com Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://www.mandriva.com/security/advisories?name=MDKSA-2005:235	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220	vendor advisory
http://secunia.com/advisories/17073	third party advisory
http://www.securityfocus.com/archive/1/419522/100/0/threaded	vendor advisory
http://www.securityfocus.com/archive/1/428058/100/0/threaded	vendor advisory
http://www.ubuntu.com/usn/usn-178-1	vendor advisory
http://marc.info/?l=bugtraq&m=112690609622266&w=2	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10481	vdb entry signature
http://www.securityfocus.com/archive/1/428028/100/0/threaded	vendor advisory
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.13.1
http://www.redhat.com/support/errata/RHSA-2005-514.html	vendor advisory
http://secunia.com/advisories/17002	third party advisory
http://secunia.com/advisories/17826	third party advisory
http://www.securityfocus.com/bid/14785	vdb entry
http://secunia.com/advisories/17918	third party advisory
http://www.securityfocus.com/archive/1/427980/100/0/threaded	vendor advisory
http://www.redhat.com/support/errata/RHSA-2005-663.html	vendor advisory
http://secunia.com/advisories/16747/	third party advisory patch vendor advisory
http://www.debian.org/security/2006/dsa-1017	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219	vendor advisory
http://www.vupen.com/english/advisories/2005/1878	vdb entry
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166248	patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22217	vdb entry
http://secunia.com/advisories/19374	third party advisory

Frequently Asked Questions

What is the severity of CVE-2005-2490?: CVE-2005-2490 has been scored as a medium severity vulnerability.
How to fix CVE-2005-2490?: To fix CVE-2005-2490, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-2490 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2005-2490 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.