CVE-2005-4347

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.

Affected products

Debian Linux: 3.0, 3.1
Debian Kernel-Patch-Vserver: before 1.9.5.5; from 2.0 before 2.2 — fixed in 1.9.5.5, 2.2

How to fix

Upgrade to a fixed version: Debian Kernel-Patch-Vserver 1.9.5.5, 2.2. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/19339
http://www.debian.org/security/2006/dsa-1011
https://exchange.xforce.ibmcloud.com/vulnerabilities/25406
http://secunia.com/advisories/19339
http://www.debian.org/security/2006/dsa-1011
https://exchange.xforce.ibmcloud.com/vulnerabilities/25406

Get alerted when CVE-2005-4347 or the next vulnerability affects your stack