CVE-2005-1126
N/A
Published: April 16, 2005 at 04:00 AM UTC
Updated: June 16, 2026 at 10:12 PM UTC
1 product affected across 1 vendorFreeBSD
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain portions of sensitive kernel memory.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.04.0 alpha4.0 releng4.14.1.14.1.1 release4.1.1 stable4.104.10 release4.10 releng4.11 stable4.24.2 stable4.34.3 release4.3 release_p384.3 releng4.3 stable4.44.4 release_p424.4 releng4.4 stable4.54.5 release4.5 release_p324.5 releng4.5 stable4.64.6 release4.6 release_p204.6 releng4.6 stable4.6.24.74.7 release4.7 release_p174.7 releng4.7 stable4.84.8 pre-release4.8 release_p64.8 releng4.94.9 pre-release4.9 releng5.05.0 alpha5.0 release_p145.0 releng5.15.1 alpha5.1 release5.1 release_p55.1 releng5.25.2.1 release5.2.1 releng5.35.3 release5.3 releng5.3 stable
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (8)
Vendor Advisoryx_refsource_FREEBSDPatch
Source: [email protected]
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:04.ifconf.ascVendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.htmlThird Party Advisoryx_refsource_SECUNIAPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/14959VDB Entryx_refsource_VUPEN
Source: [email protected]
http://www.vupen.com/english/advisories/2005/2256VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/20114Quick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card