« Volver al listado

CVE-2005-2370

Estado: ModificadaMedia (5)—

Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

EKG — EKGROB Flynn — Gaim

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-2370",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@debian.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-07-26T04:00:00.000",
  "references": [
    {
      "url": "http://gaim.sourceforge.net/security/index.php?id=20",
      "source": "security@debian.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/16265",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-813",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2007/dsa-1318",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-627.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24600",
      "source": "security@debian.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456",
      "source": "security@debian.org"
    },
    {
      "url": "http://gaim.sourceforge.net/security/index.php?id=20",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=112198499417250&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/16265",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-813",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2007/dsa-1318",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2005-627.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/426078/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24600",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple \"memory alignment errors\" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message."
    },
    {
      "lang": "es",
      "value": "Múltiples \"errores de alineamiento de memoria\" en libgadu, usado en ekg anterior a la 1.5rc2, Gaim anteriores a 1.5.0 y otros paquetes permite que atacantes remotos causen una denegación de servicio (error de bus) en ciertas arquitecturas, tales como SPACRC, mediante un mensaje de entrada."
    }
  ],
  "lastModified": "2026-06-16T22:14:45.850",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ekg:ekg:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74A32270-8C65-4ED4-96CB-B389B97587A7"
            },
            {
              "criteria": "cpe:2.3:a:ekg:ekg:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17988E27-6C98-48B4-8779-4EF69E8DBD42"
            },
            {
              "criteria": "cpe:2.3:a:ekg:ekg:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12FCB0EE-8BCE-4E68-B78D-A57E8E9DEC92"
            },
            {
              "criteria": "cpe:2.3:a:ekg:ekg:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D723B90C-9746-4F94-A8A3-273240A2CBCA"
            },
            {
              "criteria": "cpe:2.3:a:ekg:ekg:1.6_rc1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4A4DE4D-6521-49DF-917A-7621CABA3D68"
            },
            {
              "criteria": "cpe:2.3:a:ekg:ekg:2005-04-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0288DF54-4271-42AD-8985-07440A7CFBC2"
            },
            {
              "criteria": "cpe:2.3:a:ekg:ekg:2005-06-05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB1B9704-DBF5-4973-9E37-D6D904B15626"
            },
            {
              "criteria": "cpe:2.3:a:rob_flynn:gaim:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFA6DFFE-838F-4E5D-AD19-77201AAFDED1",
              "versionEndIncluding": "1.4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@debian.org"
}