CVE-2005-0109 Information disclosure in n/a
Local attackers can exploit Hyper-Threading timing side-channels to monitor other threads and steal sensitive data like cryptographic keys.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0109?
CVE-2005-0109 is a medium-severity vulnerability in Freebsd Freebsd, published on 8 Mar 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
Which versions are affected by CVE-2005-0109?
It affects 8 products.
Products include Freebsd Freebsd, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Fedora Core, Sco Openserver, Sco Unixware and 2 more.
How do I fix CVE-2005-0109?
Apply the vendor's patch.
Is CVE-2005-0109 being exploited?
There is no known exploitation of CVE-2005-0109 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-3h63-pxm6-2x4m.