Every CVE Search/ Get API key

CVE-2005-2459

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5...

5.0 Medium

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Exploit likelihood

4.63%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Record
CVE-2005-2459
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Record
CVE-2005-2459
Updated
2026-11-02
EUVDEUVD-2005-2460 No score

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Record
EUVD-2005-2460
Updated
2026-11-03
GitHub AdvisoriesGHSA-g8ph-8hmr-373j No score

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5...

The huft_build function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service (kernel crash) via a certain compressed file that leads to a null pointer dereference, a different vulnerability than CVE-2005-2458.

Record
GHSA-g8ph-8hmr-373j
Weakness
CWE-476
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-source-2.4.27
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-10sarge1, plus listed versions
2.4.27-10
2.4.27-10sarge1
kernel-image-2.4.27-alpha
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-10sarge1, plus listed versions
2.4.27-10
2.4.27-10sarge1
kernel-patch-2.4.27-arm
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-1sarge1, plus listed versions
2.4.27-1
2.4.27-1sarge1
kernel-image-2.4.27-arm
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-2sarge1, plus listed versions
2.4.27-2
2.4.27-2sarge1
kernel-image-2.4.27-i386
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-10sarge1, plus listed versions
2.4.27-10
2.4.27-10sarge1
kernel-image-2.4.27-ia64
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-10sarge1, plus listed versions
2.4.27-10
2.4.27-10sarge1
kernel-image-2.4.27-m68k
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-3sarge1, plus listed versions
2.4.27-3
2.4.27-3sarge1
kernel-patch-2.4.27-mips
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-10.sarge1.040815-1, plus listed versions
2.4.27-10.040815-1
2.4.27-10.sarge1.040815-1
kernel-patch-powerpc-2.4.27
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-10sarge1, plus listed versions
2.4.27-10
2.4.27-10sarge1
kernel-image-2.4.27-s390
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-2sarge1, plus listed versions
2.4.27-2
2.4.27-2sarge1
Show 11 moreShow less
Affected packages
PackageAffectedFixed
kernel-image-2.4.27-sparc
Debian:3.1
From an advisory covering 12 CVEs
 before 2.4.27-9sarge1, plus listed versions
2.4.27-9
2.4.27-9sarge1
kernel-source-2.6.8
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-16sarge1, plus listed versions
2.6.8-16
2.6.8-16sarge1
kernel-image-2.6.8-alpha
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-16sarge1, plus listed versions
2.6.8-16
2.6.8-16sarge1
kernel-image-2.6.8-amd64
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-16sarge1, plus listed versions
2.6.8-14
2.6.8-16sarge1
kernel-image-2.6.8-hppa
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-6sarge1, plus listed versions
2.6.8-6
2.6.8-6sarge1
kernel-image-2.6.8-i386
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-16sarge1, plus listed versions
2.6.8-16
2.6.8-16sarge1
kernel-image-2.6.8-ia64
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-14sarge1, plus listed versions
2.6.8-14
2.6.8-14sarge1
kernel-image-2.6.8-m68k
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-4sarge1, plus listed versions
2.6.8-4
2.6.8-4sarge1
kernel-patch-powerpc-2.6.8
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-12sarge1, plus listed versions
2.6.8-12
2.6.8-12sarge1
kernel-image-2.6.8-s390
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-5sarge1, plus listed versions
2.6.8-5
2.6.8-5sarge1
kernel-image-2.6.8-sparc
Debian:3.1
From an advisory covering 27 CVEs
 before 2.6.8-15sarge1, plus listed versions
2.6.8-15
2.6.8-15sarge1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2459 is a medium vulnerability (CVSS 5.0) in Debian Linux, published August 22, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.63%, the 91st percentile. No source names a fixed version.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open