Read the docs
TI-2005-01063 Aliases CVE-2005-1125GHSA-7x55-jrxh-rmp2

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded…

Priority LOW 33Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.

Why it matters now

EPSS 0.06739 93rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:avaya:libsafe:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.5:*:*:*:*:*:*:*2.0.5VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.6:*:*:*:*:*:*:*2.0.6VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.7:*:*:*:*:*:*:*2.0.7VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.8:*:*:*:*:*:*:*2.0.8VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.9:*:*:*:*:*:*:*2.0.9VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.10:*:*:*:*:*:*:*2.0.10VulnerableAvaya
  • cpe:2.3:a:avaya:libsafe:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.8:*:*:*:*:*:*:* Versions 2.0.8 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.9:*:*:*:*:*:*:* Versions 2.0.9 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.10:*:*:*:*:*:*:* Versions 2.0.10 Vulnerable ·Avaya
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:avaya:libsafe:2.0.11:*:*:*:*:*:*:*2.0.11VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.12:*:*:*:*:*:*:*2.0.12VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.13:*:*:*:*:*:*:*2.0.13VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.14:*:*:*:*:*:*:*2.0.14VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.15:*:*:*:*:*:*:*2.0.15VulnerableAvaya
cpe:2.3:a:avaya:libsafe:2.0.16:*:*:*:*:*:*:*2.0.16VulnerableAvaya
  • cpe:2.3:a:avaya:libsafe:2.0.11:*:*:*:*:*:*:* Versions 2.0.11 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.12:*:*:*:*:*:*:* Versions 2.0.12 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.13:*:*:*:*:*:*:* Versions 2.0.13 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.14:*:*:*:*:*:*:* Versions 2.0.14 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.15:*:*:*:*:*:*:* Versions 2.0.15 Vulnerable ·Avaya
  • cpe:2.3:a:avaya:libsafe:2.0.16:*:*:*:*:*:*:* Versions 2.0.16 Vulnerable ·Avaya

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-1125
  2. 2026-10-03 Alias added: GHSA-7x55-jrxh-rmp2

References

Exploit 1

  • TI-2002-00170 The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument… CVSS 2.0MEDIUM 4.6
  • TI-2002-00169 libsafe 2.0-11 and earlier allows attackers to bypass protection against format string… CVSS 2.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences