CVE-2005-2458

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-08-23 · updated 2026-06-16

Description

inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service (kernel crash) via a compressed file with "improper tables".

Affected products

Linux kernel: 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3 (+42)

References

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.12.5
http://secunia.com/advisories/16355/
http://secunia.com/advisories/16500
http://secunia.com/advisories/17826
http://secunia.com/advisories/17918
http://secunia.com/advisories/18056
http://secunia.com/advisories/18059
http://secunia.com/advisories/18510
http://secunia.com/advisories/18684
http://secunia.com/advisories/19252
http://sources.redhat.com/ml/bug-gnu-utils/1999-06/msg00183.html
http://www.debian.org/security/2005/dsa-921

Get alerted when CVE-2005-2458 or the next vulnerability affects your stack