CVE-2005-2370
Last modified
CVE-2005-2370 is a vulnerability of currently unknown severity. Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.. EPSS estimates a 2.32% chance of exploitation in the next 30 days.
Description
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ekg | Ekg | 1.1 |
| Ekg | Ekg | 1.3 |
| Ekg | Ekg | 1.4 |
| Ekg | Ekg | 1.5 |
| Ekg | Ekg | 1.6_rc1 |
| Ekg | Ekg | 2005-04-11 |
| Ekg | Ekg | 2005-06-05 |
| Rob Flynn | Gaim | <= 1.4.0 |
References
- http://secunia.com/advisories/16265Vendor Advisory
- http://secunia.com/advisories/16265Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2370?
How severe is CVE-2005-2370?
How do I fix CVE-2005-2370?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2364Unknown vulnerability in the (1) GIOP dissector, (2) WBXML, …
- CVE-2005-2365Unknown vulnerability in the SMB dissector in Ethereal 0.9.0…
- CVE-2005-2366Unknown vulnerability in the BER dissector in Ethereal 0.10.…
- CVE-2005-2367Format string vulnerability in the proto_item_set_text funct…
- CVE-2005-2368vim 6.3 before 6.3.082, with modelines enabled, allows exter…
- CVE-2005-2369Multiple integer signedness errors in libgadu, as used in ek…
- CVE-2005-2371Directory traversal vulnerability in Oracle Reports 6.0, 6i,…
- CVE-2005-2372Oracle Forms 4.5 through 10g starts form executables from ar…
- CVE-2005-2373Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote auth…
- CVE-2005-2374Belkin 54g wireless routers do not properly set an administr…
- CVE-2005-2375Format string vulnerability in Race Driver 1.20 and earlier …
- CVE-2005-2376Buffer overflow in Race Driver 1.20 and earlier allows remot…
Are you affected by CVE-2005-2370?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST