CVE-2005-2019
Last modified
CVE-2005-2019 is a vulnerability of currently unknown severity. ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions.. EPSS estimates a 1.23% chance of exploitation in the next 30 days.
Description
ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | 5.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2019?
How severe is CVE-2005-2019?
How do I fix CVE-2005-2019?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2010Cross-site scripting (XSS) vulnerability in trackback.asp in…
- CVE-2005-2011Multiple cross-site scripting (XSS) vulnerabilities in paFAQ…
- CVE-2005-2012Multiple SQL injection vulnerabilities in login in paFAQ 1.0…
- CVE-2005-2013paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive…
- CVE-2005-2014The "upload a language pack" feature in paFAQ 1.0 Beta 4 all…
- CVE-2005-2017Symantec AntiVirus 9 Corporate Edition allows local users to…
- CVE-2005-2020Directory traversal vulnerability in the web server for 3Com…
- CVE-2005-2021Cross-site scripting (XSS) vulnerability in cPanel 9.1 and e…
- CVE-2005-2022Unknown vulnerability in Webmail in iPlanet Messaging Server…
- CVE-2005-2023The send_pinentry_environment function in asshelp.c in gpg2 …
- CVE-2005-2024Vipul Razor Agents (razor-agents) before 2.70 allows remote …
- CVE-2005-2025Cisco VPN 3000 Concentrator before 4.1.7.F allows remote att…
Are you affected by CVE-2005-2019?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST