‹ Back to list

CVE-2005-3807

Status: ModifiedMedium (4.9)—Exploit
Severity4.9Medium · CVSS 2.0
Exploitation probability0.74 %higher than 54% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB

Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function.

CVSS

Base score
4.9
Version
2.0
Vector
AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
0.74 %
Percentile among all scored CVEs
54
Score date
10/21/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

Affected technologies (1)

Linux — Linux Kernel

CWEs

References

Show 22 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2005-3807",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-11-25T21:03:00.000",
  "references": [
    {
      "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=linux-kernel&m=113190437101622&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/17917",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/17918",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18203",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/advisories/9806",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/15745",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.trustix.org/errata/2005/0070",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ubuntulinux.org/usn/usn-231-1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc15ae14e97ee9d5ed740cbb0b94996076d8b37e",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=linux-kernel&m=113190437101622&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/17917",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/17918",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18203",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/advisories/9806",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/419522/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/427981/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/15745",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.trustix.org/errata/2005/0070",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntulinux.org/usn/usn-231-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a denial of service (memory exhaustion) via certain Samba activities that cause an fasync entry to be re-allocated by the fcntl_setlease function after the fasync queue has already been cleaned by the locks_delete_lock function."
    }
  ],
  "lastModified": "2026-06-16T22:17:40.030",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "142BCD48-8387-4D0C-A052-44DD4144CBFF"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8220D81-9065-471F-9256-CFE7B9941555"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB445E3E-CCBD-4737-BE30-841B9A79D558"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5301E27-8021-467C-A9A2-AF2137EF0299"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79787868-2D77-4B55-AD61-C2B357CCE047"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B3F27D3-8F1D-4576-A584-1E2059CC67B1"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB5D260C-AE1C-47E9-A88C-B9C2B4349249"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA9958C6-AB7D-4B67-9AA7-42B628CBC391"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "455E647F-73DD-400A-AA19-3D93FE2E57AE"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FC53528-A67F-42DF-B8DA-778A65893F9D"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CDE1E92-C64D-4A3B-95A2-384BD772B28B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D90502F-EC45-4ADC-9428-B94346DA660B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81DE32C2-5B07-4812-9F88-000F5FB000C2"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7936B7EE-9CD1-4698-AD67-C619D0171A88"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5738D628-0B2D-4F56-9427-2009BFCB6C11"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "860F9225-8A3F-492C-B72B-5EFFB322802C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57E23724-2CA4-4211-BB83-38661BE7E6AF"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "298266AB-2A36-4606-BF80-2185FC56C4D2"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C2658CA-56C2-494F-AC42-618EC413CBDF"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD34526D-F2CC-44C5-991D-B1E41C327860"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24B879D6-4631-49A8-9366-75577DFB755D"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25379B32-D898-4E44-A740-978A129B5E05"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B90F8F2-9549-413D-9676-3EF634D832B5"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "915E64EF-6EEC-4DE2-A285-5F3FCE389645"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.15:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "390B1E09-7014-4A74-834C-806BBEBAF6F4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}