← Back

CVE-2005-1406

nvd nist
Published: May 6, 2005Modified: Apr 16, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.

Affected (15)

Products: Freebsd: Freebsd
1 product
Freebsd
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Version 4.10
Version 4.11
Version 4.1
Version 4.2
Version 4.3
Version 4.4
Version 4.5
Version 4.6
Version 4.7
Version 4.8
Version 4.9
Version 5.1
Version 5.2
Version 5.3
Version 5.4

References (12)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:08.kmem.asc (unsafe URL)
Source: cve@mitre.org
PatchVendor Advisory
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:08.kmem.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.