CVE-2005-1125 Race condition in n/a

Medium 5.1 Published Updated

Attackers can bypass libsafe protection in multi-threaded applications via a race condition, enabling exploitation of other vulnerabilities.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Not stated
Victim action needed
Not needed
Fix
None listed

What is CVE-2005-1125?

CVE-2005-1125 is a medium-severity vulnerability in n/a, published on 16 Apr 2005.

Official description

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.

Which versions are affected by CVE-2005-1125?

It affects 1 product.

Products include Avaya Libsafe.

How do I fix CVE-2005-1125?

No fix has been published for CVE-2005-1125 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-1125 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-1125 exists.

Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.

Sources

Also known as GHSA-7x55-jrxh-rmp2.

Is CVE-2005-1125 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free