VULNERABILITY INTELLIGENCE

CVE-2005-0708

CVSS score10 HIGH
EPSS probability2.27%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.

Primary references