CVE-2005-4347

MEDIO 5.0CVE-2005-4347 · Published 31/12/2005 · updated 16/06/2026

In breve

CVE-2005-4347 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda kernel-patch-vserver (debian).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 81.7% delle vulnerabilità.
Correzione: aggiornare a 2.2, 1.9.5.5 o successiva.

Package	Affected versions	Patched versions
kernel-patch-vserver debian	`≥ 2.0, < 2.2< 1.9.5.5`	`2.21.9.5.5`

Description

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.

References

secunia.com/advisories/19339 · Third Party Advisory
debian.org/security/2006/dsa-1011 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/25406 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free