« Back to list

CVE-2005-4895

Status: ModifiedMedium (5)—

Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Csilvers — Gperftools

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2005-4895",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-07-25T19:55:01.273",
  "references": [
    {
      "url": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-189"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de enteros en TCMalloc (tcmalloc.cc) en gperftools antes v0.4 hace que sea más fácil para los atacantes dependientes de contexto realizar ataques relacionados con la memoria, tales como desbordamientos de memoria a través de un valor de tamaño grande, lo que causa que se asigne menos memoria de lo esperado."
    }
  ],
  "lastModified": "2026-06-16T22:19:40.793",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:csilvers:gperftools:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEC9A6EA-129D-4A9E-A3F6-379FC64E4B22",
              "versionEndIncluding": "0.3"
            },
            {
              "criteria": "cpe:2.3:a:csilvers:gperftools:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7BDB58C4-45E6-401B-9305-B422E7760FB3"
            },
            {
              "criteria": "cpe:2.3:a:csilvers:gperftools:0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0D76DB5-A8CA-4667-8B62-F38132D7A5C8"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}