CVE-2005-3783

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-23 · updated 2026-06-16

Description

The ptrace functionality (ptrace.c) in Linux kernel 2.6 before 2.6.14.2, using CLONE_THREAD, does not use the thread group ID to check whether it is attaching to itself, which allows local users to cause a denial of service (crash).

Affected products

Linux kernel: 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5 (+31)

References

http://secunia.com/advisories/17761
http://secunia.com/advisories/17787
http://secunia.com/advisories/17917
http://secunia.com/advisories/17918
http://secunia.com/advisories/18203
http://secunia.com/advisories/19369
http://secunia.com/advisories/19374
http://secunia.com/advisories/19607
http://www.debian.org/security/2006/dsa-1017
http://www.debian.org/security/2006/dsa-1018
http://www.kernel.org/git/?p=linux/kernel/git/gregkh/linux-2.6.14.y.git%3Ba=blobdiff%3Bh=fcfc4568b45f3f190ba320b0d5853836921cb8bc%3Bhp=019e04ec065a55d8f28157d3a1f7ba06cafd347f%3Bhb=082d52c56f642d21b771a13221068d40915a1409%3Bf=kernel/ptrace.c

Get alerted when CVE-2005-3783 or the next vulnerability affects your stack