CVE-2005-0109: Freebsd

Medium severity, CVSS 5.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.

Affected products

• Freebsd Freebsd: version 1.1.5.1 only; version 2.0 only; version 2.0.5 only; version 2.1.0 only; version 2.1.5 only; version 2.1.6 only; …
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only; version 4.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only; version 4.0 only
• Red Hat Fedora Core: version core_3.0 only
• Sco Openserver: version 5.0.7 only
• Sco Unixware: version 7.1.3 only; version 7.1.3_up only; version 7.1.4 only
• Sun Solaris: version 7.0 only; version 8.0 only; version 9.0 only; version 10.0 only
• Ubuntu Ubuntu Linux: version 4.1 only; version 5.04 only

Published 2005-03-05. Last modified 2026-06-16.