CVE-2005-0124

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-04-14 · updated 2026-06-16

Description

The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.

Affected products

Linux kernel: 2.4.0, 2.4.0-test1, 2.4.0-test10, 2.4.0-test11, 2.4.0-test12, 2.4.0-test2 (+66)

References

http://seclists.org/lists/linux-kernel/2004/Dec/3914.html
http://seclists.org/lists/linux-kernel/2005/Jan/1089.html
http://seclists.org/lists/linux-kernel/2005/Jan/2018.html
http://seclists.org/lists/linux-kernel/2005/Jan/2020.html
http://secunia.com/advisories/17002
http://secunia.com/advisories/18684
http://secunia.com/advisories/19374
http://secunia.com/advisories/20163
http://secunia.com/advisories/20202
http://secunia.com/advisories/20338
http://securitytracker.com/id?1013018
http://www.debian.org/security/2006/dsa-1017

Get alerted when CVE-2005-0124 or the next vulnerability affects your stack