CVE-2005-0708

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.

Affected products

Dragonflybsd: 1.0, 1.1
FreeBSD: 4.0, 4.0-alpha, 4.0-releng, 4.1, 4.1.1, 4.1.1-release (+55)

References

https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc
https://www.freebsd.org/security/advisories/FreeBSD-SA-05:02.sendfile.asc

Get alerted when CVE-2005-0708 or the next vulnerability affects your stack