The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer…
Priority MEDIUM 47Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow remote attackers to obtain sensitive information.
Why it matters now
EPSS 0.02268 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 63
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | DragonFlyBSD |
| cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | DragonFlyBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* | 4.0 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* | 4.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* | 4.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* | 4.1.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:* | 4.1.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:* | 4.1.1 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | FreeBSD |
- cpe:2.3:o:dragonflybsd:dragonflybsd:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·DragonFlyBSD
- cpe:2.3:o:dragonflybsd:dragonflybsd:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·DragonFlyBSD
- cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:* Versions 4.0 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:* Versions 4.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:* Versions 4.1.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:* Versions 4.1.1 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·FreeBSD
Show 53 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:* | 4.2 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* | 4.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:* | 4.3 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:* | 4.3 release_p38 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:* | 4.3 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:* | 4.3 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:* | 4.4 release_p42 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:* | 4.4 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:* | 4.4 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:* | 4.5 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:* | 4.5 release_p32 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:* | 4.5 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:* | 4.5 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* | 4.6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:* | 4.6 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:* | 4.6 release_p20 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:* | 4.6 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:* | 4.6 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* | 4.6.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* | 4.7 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:* | 4.7 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:* | 4.7 release_p17 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:* | 4.7 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:* | 4.7 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* | 4.8 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:* | 4.8 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:* | 4.8 release_p6 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:* | 4.8 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* | 4.9 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:* | 4.9 pre-release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:* | 4.9 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* | 4.10 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* | 4.10 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* | 4.10 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* | 4.11 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* | 5.0 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* | 5.0 release_p14 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* | 5.0 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* | 5.1 alpha | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* | 5.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* | 5.1 release_p5 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:* | 5.1 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:* | 5.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:* | 5.2.1 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:* | 5.2.1 releng | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* | 5.3 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* | 5.3 release | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* | 5.3 stable | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* | 5.4 pre-release | Vulnerable | FreeBSD |
- cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:* Versions 4.2 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:* Versions 4.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:* Versions 4.3 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:* Versions 4.3 release_p38 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:* Versions 4.3 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:* Versions 4.3 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:* Versions 4.4 release_p42 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:* Versions 4.4 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:* Versions 4.4 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:* Versions 4.5 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:* Versions 4.5 release_p32 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:* Versions 4.5 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:* Versions 4.5 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:* Versions 4.6 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:* Versions 4.6 release_p20 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:* Versions 4.6 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:* Versions 4.6 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:* Versions 4.6.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:* Versions 4.7 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:* Versions 4.7 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:* Versions 4.7 release_p17 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:* Versions 4.7 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:* Versions 4.7 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:* Versions 4.8 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:* Versions 4.8 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:* Versions 4.8 release_p6 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:* Versions 4.8 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:* Versions 4.9 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:* Versions 4.9 pre-release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:* Versions 4.9 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* Versions 4.10 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* Versions 4.10 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* Versions 4.10 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* Versions 4.11 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* Versions 5.0 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* Versions 5.0 release_p14 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* Versions 5.0 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* Versions 5.1 alpha Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* Versions 5.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* Versions 5.1 release_p5 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:* Versions 5.1 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:* Versions 5.2.1 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:* Versions 5.2.1 releng Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:* Versions 5.3 release Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:* Versions 5.3 stable Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:* Versions 5.4 pre-release Vulnerable ·FreeBSD
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-0708
- 2026-10-03 Alias added: GHSA-fw4f-4894-c9rw
References
Advisory 1
Sources
- CVE-2005-0708 · CVE Program
- CVE-2005-0708 · NVD
- FIRST EPSS
- GHSA-fw4f-4894-c9rw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences