VULNERABILITY INTELLIGENCE
CVE-2005-0109
CVSS score5.6 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2005-03-05
Last modified2026-06-16
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
Primary references
- cve@mitre.org — Mailing List
- cve@mitre.org — Mailing List
- cve@mitre.org — Mailing List
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory, US Government Resource