CVE-2005-3527 - Vulnerability Details - OpenCVE

Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity High

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/17917
http://secunia.com/advisories/17918
http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf
http://www.mandriva.com/security/advisories?name=MDKSA-2006:018
http://www.securityfocus.com/advisories/9806
http://www.securityfocus.com/archive/1/419522/100/0/threaded
http://www.securityfocus.com/archive/1/427981/100/0/threaded
http://www.securityfocus.com/bid/15723

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-09T01:00:00

Updated: 2024-08-07T23:17:22.704Z

Reserved: 2005-11-09T00:00:00

Link: CVE-2005-3527

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-11-09T01:02:00.000

Modified: 2024-11-21T00:02:06.733

Link: CVE-2005-3527

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-07T00:00:00", "descriptions": [{"lang": "en", "value": "Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "17917", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17917"}, {"name": "SUSE-SA:2005:067", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.securityfocus.com/advisories/9806"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf"}, {"name": "SUSE-SA:2005:068", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"}, {"name": "FLSA:157459-4", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"}, {"name": "MDKSA-2006:018", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"}, {"name": "15723", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15723"}, {"name": "17918", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17918"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3527", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "17917", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17917"}, {"name": "SUSE-SA:2005:067", "refsource": "SUSE", "url": "http://www.securityfocus.com/advisories/9806"}, {"name": "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git;a=commitdiff;h=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf", "refsource": "CONFIRM", "url": "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git;a=commitdiff;h=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf"}, {"name": "SUSE-SA:2005:068", "refsource": "SUSE", "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"}, {"name": "FLSA:157459-4", "refsource": "FEDORA", "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"}, {"name": "MDKSA-2006:018", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"}, {"name": "15723", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15723"}, {"name": "17918", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17918"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:17:22.704Z"}, "title": "CVE Program Container", "references": [{"name": "17917", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17917"}, {"name": "SUSE-SA:2005:067", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.securityfocus.com/advisories/9806"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf"}, {"name": "SUSE-SA:2005:068", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"}, {"name": "FLSA:157459-4", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"}, {"name": "MDKSA-2006:018", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"}, {"name": "15723", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15723"}, {"name": "17918", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17918"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3527", "datePublished": "2005-11-09T01:00:00", "dateReserved": "2005-11-09T00:00:00", "dateUpdated": "2024-08-07T23:17:22.704Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "142BCD48-8387-4D0C-A052-44DD4144CBFF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP."}, {"lang": "es", "value": "Condici\u00f3n de carrera en do_coredump en signal.c en el kernel 2.6 de Linux permite a usuarios locales causar una denegaci\u00f3n de servicio disparando un volcado del n\u00facleo (core dump) en un subproceso mientras otro tiene un SIGSTOP pendiente."}], "id": "CVE-2005-3527", "lastModified": "2024-11-21T00:02:06.733", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 1.9, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-09T01:02:00.000", "references": [{"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17917"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17918"}, {"source": "cve@mitre.org", "url": "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/advisories/9806"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15723"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17917"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17918"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git%3Ba=commitdiff%3Bh=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/advisories/9806"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15723"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}