Skip to main content

CVE-2005-1406

4.6
CVSS v2.0 Base Score
0.38%
LOW RiskEPSS (30th percentile)
NVD-CWE-Other

The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.

Published: 5/6/2005
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

4.6

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

0.38%LOW Exploitation Risk
30th percentile

This vulnerability has a 0.38% probability of being exploited in the next 30 days, ranking higher than 30% of all scored CVEs.

CWE Classification

NVD-CWE-Other