CVE-2005-3808

Status: ModifiedMedium (4.9)—Exploit
Severity4.9Medium · CVSS 2.0
Exploitation probability0.77 %higher than 55% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB

Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system.

CVSS

Base score
4.9
Version
2.0
Vector
AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
0.77 %
Percentile among all scored CVEs
55
Score date
10/21/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

Affected technologies (1)

CWEs

References

Show 22 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2005-3808",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-11-25T21:03:00.000",
  "references": [
    {
      "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/lists/linux-kernel/2005/Nov/7839.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18203",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/18788",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/19038",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kernel.org/hg/linux-2.6/?cs=6d5ffbb49406",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/advisories/9852",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/15846",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://usn.ubuntu.com/231-1/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/lists/linux-kernel/2005/Nov/7839.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18203",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/18788",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/19038",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kernel.org/hg/linux-2.6/?cs=6d5ffbb49406",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:018",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2006_06_kernel.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/advisories/9852",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/15846",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://usn.ubuntu.com/231-1/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service (hang) via 64-bit mmap calls that are not properly handled on a 32-bit system."
    }
  ],
  "lastModified": "2026-06-16T22:17:40.173",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D90502F-EC45-4ADC-9428-B94346DA660B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CD39A7A-9172-4B85-B8FE-CEB94207A897"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35F5C369-6BFB-445F-AA8B-6F6FA7C33EF3"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81DE32C2-5B07-4812-9F88-000F5FB000C2"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02EED3D5-8F89-4B7F-A34B-52274B1A754F"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F87AA89-F377-4BEB-B69F-809F5DA6176C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C27AF62E-A026-43E9-89E6-CD807CE9DF51"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D343B121-C007-49F8-9DE8-AA05CE58FF0B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7936B7EE-9CD1-4698-AD67-C619D0171A88"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1A2AA2D-5183-4C49-A59D-AEB7D9B5A69E"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A0370A2-0A23-4E34-A2AC-8D87D051B0B1"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5738D628-0B2D-4F56-9427-2009BFCB6C11"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F43EBCB4-FCF4-479A-A44D-D913F7F09C77"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C7BF3B2-CCD1-4D39-AE9C-AB24ABA57447"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "860F9225-8A3F-492C-B72B-5EFFB322802C"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19DFB4EF-EA1F-4680-9D97-2FDFAA4B4A25"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57E23724-2CA4-4211-BB83-38661BE7E6AF"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0688B3F-F8F2-4C62-B7A3-08F9FDCE7A70"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3896C4A6-C2F6-47CE-818A-7EB3DBF15BC3"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6143DC1F-D62E-4DB2-AF43-30A07413D68B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "298266AB-2A36-4606-BF80-2185FC56C4D2"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C2658CA-56C2-494F-AC42-618EC413CBDF"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD34526D-F2CC-44C5-991D-B1E41C327860"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2F0B900-34E9-4545-B7AE-AF0A4363EACE"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5220F0FE-C4CC-4E75-A16A-4ADCABA7E8B8"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04F25DE0-CA8E-4F57-87A5-C30D89CC9E44"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F87F764B-4097-44FA-B96E-A5DA75E31F7B"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7025803-C679-44DB-ADEE-864E6CAAD9B5"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:2.6.14:rc4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24B879D6-4631-49A8-9366-75577DFB755D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}