CVE-2005-4347: Debian Linux

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot barrier" with util-vserver, which allows attackers to access files on the host system that are outside of the vserver.

Affected products

• Debian Debian Linux: version 3.0 only; version 3.1 only
• Debian Kernel-Patch-Vserver: before 1.9.5.5 (fixed in 1.9.5.5); from 2.0, before 2.2 (fixed in 2.2)

Published 2005-12-31. Last modified 2026-06-16.