Vulnerability Details : CVE-2005-3527
Race condition in do_coredump in signal.c in Linux kernel 2.6 allows local users to cause a denial of service by triggering a core dump in one thread while another thread has a pending SIGSTOP.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2005-3527
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2005-3527
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:L/AC:H/Au:N/C:N/I:N/A:C |
1.9
|
6.9
|
NIST |
References for CVE-2005-3527
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:018
-
http://www.securityfocus.com/bid/15723
-
http://www.kernel.org/git/?p=linux/kernel/git/davem/sparc-2.6.git;a=commitdiff;h=788e05a67c343fa22f2ae1d3ca264e7f15c25eaf
- http://www.securityfocus.com/advisories/9806
- http://www.securityfocus.com/archive/1/427981/100/0/threaded
- http://www.securityfocus.com/archive/1/419522/100/0/threaded
Products affected by CVE-2005-3527
- cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*