CVE-2005-1406: Freebsd

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.

Affected products

• Freebsd Freebsd: version 4.1 only; version 4.2 only; version 4.3 only; version 4.4 only; version 4.5 only; version 4.6 only; …

Published 2005-05-06. Last modified 2026-06-16.