Hyper-Threading technology, as used in FreeBSD and other operating systems that are run…
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.
Summary
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 121
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:* | 1.1.5.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:* | 2.0.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:* | 2.1.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:* | 2.1.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:* | 2.1.6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:* | 2.1.6.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:* | 2.1.7.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | FreeBSD |
- cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:* Versions 1.1.5.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:* Versions 2.1.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:* Versions 2.1.6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:* Versions 2.1.6.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:* Versions 2.1.7.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·FreeBSD
Show 111 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:* | 2.2.6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:* | 2.2.8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:* | 3.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:* | 3.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:* | 3.4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:* | 3.5 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:* | 3.5.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:* | 3.5.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:* | 3.5.1 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* | 4.0 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* | 4.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* | 4.1.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:* | 4.1.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:* | 4.1.1 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:* | 4.2 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:* | 4.3 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:* | 4.3 release_p38 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:* | 4.3 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:* | 4.3 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:* | 4.4 release_p42 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:* | 4.4 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:* | 4.4 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:* | 4.5 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:* | 4.5 release_p32 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:* | 4.5 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:* | 4.5 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* | 4.6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:* | 4.6 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:* | 4.6 release_p20 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:* | 4.6 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:* | 4.6 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* | 4.6.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* | 4.7 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:* | 4.7 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:* | 4.7 release_p17 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:* | 4.7 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:* | 4.7 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* | 4.8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:* | 4.8 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:* | 4.8 release_p6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:* | 4.8 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* | 4.9 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:* | 4.9 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:* | 4.9 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* | 4.10 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* | 4.10 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:* | 4.10 release_p8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* | 4.10 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:* | 4.11 release_p3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:* | 4.11 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* | 4.11 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* | 5.0 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* | 5.0 release_p14 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* | 5.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* | 5.1 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* | 5.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* | 5.1 release_p5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:* | 5.1 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:* | 5.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:* | 5.2.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:* | 5.2.1 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* | 5.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* | 5.3 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:* | 5.3 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* | 5.3 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* | 5.4 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:* | 5.4 release | Running on | FreeBSD |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:* | core_3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:* | 5.0.7 | Vulnerable | Sco |
| cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:* | 7.1.3 | Vulnerable | Sco |
| cpe:2.3:o:sco:unixware:7.1.3_up:*:*:*:*:*:*:* | 7.1.3_up | Vulnerable | Sco |
| cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:* | 7.1.4 | Vulnerable | Sco |
| cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* | 7.0 | Vulnerable | Sun |
| cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* | 8.0 | Vulnerable | Sun |
| cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:* | 9.0 | Vulnerable | Sun |
| cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:* | 9.0 x86_update_2 | Vulnerable | Sun |
| cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:* | 10.0 | Vulnerable | Sun |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:* | 5.04 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:* | 5.04 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:* | 5.04 | Vulnerable | Ubuntu |
- cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:* Versions 2.2.8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:* Versions 3.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:* Versions 3.5 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:* Versions 3.5.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:* Versions 3.5.1 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* Versions 4.0 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* Versions 4.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:* Versions 4.1.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:* Versions 4.1.1 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:* Versions 4.2 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:* Versions 4.3 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:* Versions 4.3 release_p38 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:* Versions 4.3 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:* Versions 4.3 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:* Versions 4.4 release_p42 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:* Versions 4.4 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:* Versions 4.4 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:* Versions 4.5 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:* Versions 4.5 release_p32 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:* Versions 4.5 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:* Versions 4.5 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:* Versions 4.6 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:* Versions 4.6 release_p20 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:* Versions 4.6 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:* Versions 4.6 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:* Versions 4.7 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:* Versions 4.7 release_p17 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:* Versions 4.7 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:* Versions 4.7 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* Versions 4.8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:* Versions 4.8 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:* Versions 4.8 release_p6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:* Versions 4.8 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* Versions 4.9 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:* Versions 4.9 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:* Versions 4.9 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* Versions 4.10 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* Versions 4.10 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:* Versions 4.10 release_p8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* Versions 4.10 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:* Versions 4.11 release_p3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:* Versions 4.11 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* Versions 4.11 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* Versions 5.0 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* Versions 5.0 release_p14 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* Versions 5.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* Versions 5.1 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* Versions 5.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* Versions 5.1 release_p5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:* Versions 5.1 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:* Versions 5.2.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:* Versions 5.2.1 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* Versions 5.3 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:* Versions 5.3 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* Versions 5.3 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* Versions 5.4 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:* Versions 5.4 release Running on ·FreeBSD
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:* Versions core_3.0 Vulnerable ·Red Hat
- cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:* Versions 5.0.7 Vulnerable ·Sco
- cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Sco
- cpe:2.3:o:sco:unixware:7.1.3_up:*:*:*:*:*:*:* Versions 7.1.3_up Vulnerable ·Sco
- cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:* Versions 7.1.4 Vulnerable ·Sco
- cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:* Versions 7.0 Vulnerable ·Sun
- cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* Versions 8.0 Vulnerable ·Sun
- cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:* Versions 9.0 Vulnerable ·Sun
- cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:* Versions 9.0 x86_update_2 Vulnerable ·Sun
- cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:* Versions 10.0 Vulnerable ·Sun
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
Remediation
Red Hat 3 advisories
- RHSA-2005:882 Released 2005-12-19 · Red Hat rating Importantopenssl, php, mod_ssl, mod_imap security update for Stronghold
- Red Hat Stronghold 4
- RHSA-2005:800 Released 2005-10-11 · Red Hat rating Moderateopenssl security update
- Red Hat Desktop version 3 openssl-0.9.7a-33.17, openssl-0.9.7a-33.17.i386, openssl-devel-0.9.7a-33.17 +5
- Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.17, openssl-0.9.7a-33.17.i386, openssl-0.9.7a-33.17.ia64 +13
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.4, openssl-0.9.7a-43.4.i386, openssl-0.9.7a-43.4.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.4, openssl-0.9.7a-43.4.i386, openssl-devel-0.9.7a-43.4 +5
- Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.17, openssl-0.9.7a-33.17.i386, openssl-0.9.7a-33.17.ia64 +9
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.4, openssl-0.9.7a-43.4.i386, openssl-0.9.7a-43.4.ia64 +9
- Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.17, openssl-0.9.7a-33.17.i386, openssl-0.9.7a-33.17.ia64 +9
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.4, openssl-0.9.7a-43.4.i386, openssl-0.9.7a-43.4.ia64 +9
- RHSA-2005:476 Released 2005-06-01 · Red Hat rating Moderateopenssl security update
- Red Hat Desktop version 3 openssl-0.9.7a-33.15, openssl-0.9.7a-33.15.i386, openssl-devel-0.9.7a-33.15 +5
- Red Hat Enterprise Linux AS version 3 openssl-0.9.7a-33.15, openssl-0.9.7a-33.15.i386, openssl-0.9.7a-33.15.ia64 +13
- Red Hat Enterprise Linux AS version 4 openssl-0.9.7a-43.2, openssl-0.9.7a-43.2.i386, openssl-0.9.7a-43.2.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 openssl-0.9.7a-43.2, openssl-0.9.7a-43.2.i386, openssl-devel-0.9.7a-43.2 +5
- Red Hat Enterprise Linux ES version 3 openssl-0.9.7a-33.15, openssl-0.9.7a-33.15.i386, openssl-0.9.7a-33.15.ia64 +9
- Red Hat Enterprise Linux ES version 4 openssl-0.9.7a-43.2, openssl-0.9.7a-43.2.i386, openssl-0.9.7a-43.2.ia64 +9
- Red Hat Enterprise Linux WS version 3 openssl-0.9.7a-33.15, openssl-0.9.7a-33.15.i386, openssl-0.9.7a-33.15.ia64 +9
- Red Hat Enterprise Linux WS version 4 openssl-0.9.7a-43.2, openssl-0.9.7a-43.2.i386, openssl-0.9.7a-43.2.ia64 +9
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2005:476, RHSA-2005:800 |
| Red Hat Stronghold 4 | Fixed | RHSA-2005:882 |
Timeline
- 2026-10-02 Threatist record created from CVE-2005-0109
- 2026-10-03 Alias added: GHSA-3h63-pxm6-2x4m
References
Advisory 7
Sources
- CVE-2005-0109 · CVE Program
- CVE-2005-0109 · NVD
- FIRST EPSS
- GHSA-3h63-pxm6-2x4m · GitHub Advisory Database · CC BY 4.0
- CVE-2005-0109 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences