CVE-2005-0504

Buffer overflow in the MoxaDriverIoctl function for the moxa serial driver (moxa.c) in Linux 2.2.x, 2.4.x, and 2.6.x before 2.6.22 allows local users to execute arbitrary code via a certain modified length value.

Published: 2005-03-14 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2005-0504 is rated Low Risk (32.1/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.17%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2005-0504

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-01-17 0.15% 0.17% +0.03%
2 2025-03-30 0.17% 0.15% -0.03%
3 2025-03-29 — 0.17% —

Full EPSS history (5 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2005-0504

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.6 2.0 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 3.9 6.4 [email protected]

Weakness enumeration for CVE-2005-0504

OS Trackers for CVE-2005-0504

vendor priority summary link
redhat high — https://access.redhat.com/security/cve/CVE-2005-0504
ubuntu medium CVE-2005-0504 medium priority: Ubuntu including 2 source packages (linux-source-2.6.15, linux-source-2.6.17), 8 status rows across 4 suites (dapper, edgy, feisty, upstream): DNE 4, needs-triage 2, released 2. https://ubuntu.com/security/CVE-2005-0504

Affected software / configurations for CVE-2005-0504

Vendor Product Version Raw CPE
linux linux_kernel <= 2.6.21 cpe:2.3:o:linux:linux_kernel:*:rc7:*:*:*:*:*:*
linux linux_kernel 2.2.0 cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*
linux linux_kernel 2.2.1 cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*
linux linux_kernel 2.2.2 cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*
linux linux_kernel 2.2.3 cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*
linux linux_kernel 2.2.4 cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*
linux linux_kernel 2.2.5 cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*
linux linux_kernel 2.2.6 cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*
linux linux_kernel 2.2.7 cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*
linux linux_kernel 2.2.8 cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*
linux linux_kernel 2.2.9 cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*
linux linux_kernel 2.2.10 cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*
linux linux_kernel 2.2.11 cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*
linux linux_kernel 2.2.12 cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*
linux linux_kernel 2.2.13 cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*
linux linux_kernel 2.2.14 cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*
linux linux_kernel 2.2.15 cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*
linux linux_kernel 2.2.15 cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*
linux linux_kernel 2.2.15_pre20 cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*
linux linux_kernel 2.2.16 cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*
linux linux_kernel 2.2.16 cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*
linux linux_kernel 2.2.17 cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*
linux linux_kernel 2.2.18 cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*
linux linux_kernel 2.2.19 cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*
linux linux_kernel 2.2.20 cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*
linux linux_kernel 2.2.21 cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*
linux linux_kernel 2.2.22 cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*
linux linux_kernel 2.2.23 cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*
linux linux_kernel 2.2.24 cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*
linux linux_kernel 2.2.25 cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*
linux linux_kernel 2.3.0 cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*
linux linux_kernel 2.3.99 cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*
linux linux_kernel 2.4.0 cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*
linux linux_kernel 2.4.1 cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*
linux linux_kernel 2.4.2 cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*
linux linux_kernel 2.4.3 cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*
linux linux_kernel 2.4.4 cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*
linux linux_kernel 2.4.5 cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*
linux linux_kernel 2.4.6 cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*
linux linux_kernel 2.4.7 cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*
linux linux_kernel 2.4.8 cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*
linux linux_kernel 2.4.9 cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*
linux linux_kernel 2.4.10 cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*
linux linux_kernel 2.4.11 cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*
linux linux_kernel 2.4.12 cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*
linux linux_kernel 2.4.13 cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*
linux linux_kernel 2.4.14 cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*
linux linux_kernel 2.4.15 cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*
linux linux_kernel 2.4.16 cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*
linux linux_kernel 2.4.17 cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*
linux linux_kernel 2.4.18 cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*
linux linux_kernel 2.4.19 cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*

References for CVE-2005-0504

URL Tags
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030660.html
http://secunia.com/advisories/17002 Vendor Advisory
http://secunia.com/advisories/20163 Vendor Advisory
http://secunia.com/advisories/20202
http://secunia.com/advisories/20338 Vendor Advisory
http://secunia.com/advisories/26651 Vendor Advisory
http://secunia.com/advisories/30112
http://securitytracker.com/id?1013273
http://www.debian.org/security/2006/dsa-1067
http://www.debian.org/security/2006/dsa-1069
http://www.debian.org/security/2006/dsa-1070
http://www.debian.org/security/2006/dsa-1082
http://www.redhat.com/support/errata/RHSA-2005-529.html
http://www.redhat.com/support/errata/RHSA-2005-551.html
http://www.redhat.com/support/errata/RHSA-2005-663.html
http://www.redhat.com/support/errata/RHSA-2008-0237.html
http://www.securityfocus.com/bid/12195 Patch Vendor Advisory
http://www.ubuntu.com/usn/usn-508-1
http://www.vupen.com/english/advisories/2005/1878
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9770
cvelogic Threat Intelligence