CVE-2005-1704 — security flaw

Back Back to CVE browser

MEDIUM

security flaw

Published May 24, 2005

4.6

MEDIUM

CVSS 2.0

EPSS 0.60%

Description

Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.

Affected products

Red Hat Desktop version 3

n/a

Fixed · RHBA-2005:675
Red Hat Enterprise Linux 3

binutils-0:2.14.90.0.4-39

Fixed · RHSA-2005:659
Red Hat Enterprise Linux 3

elfutils-0:0.94.1-2

Fixed · RHSA-2006:0368
Red Hat Enterprise Linux 4

binutils-0:2.15.92.0.2-15

Fixed · RHSA-2005:673
Red Hat Enterprise Linux 4

elfutils-0:0.97.1-3

Fixed · RHSA-2006:0354
Red Hat Enterprise Linux 4

gdb-0:6.3.0.0-1.63

Fixed · RHSA-2005:709
Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2005:763
Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2005:801
Red Hat Enterprise Linux AS version 3

n/a

Fixed · RHBA-2005:675
Red Hat Enterprise Linux ES version 2.1

n/a

Fixed · RHSA-2005:801
Red Hat Enterprise Linux ES version 2.1

n/a

Fixed · RHSA-2005:763
Red Hat Enterprise Linux ES version 3

n/a

Fixed · RHBA-2005:675
Red Hat Enterprise Linux WS version 2.1

n/a

Fixed · RHSA-2005:763
Red Hat Enterprise Linux WS version 2.1

n/a

Fixed · RHSA-2005:801
Red Hat Enterprise Linux WS version 3

n/a

Fixed · RHBA-2005:675
Red Hat Linux Advanced Workstation 2.1

n/a

Fixed · RHSA-2005:763
Red Hat Linux Advanced Workstation 2.1

n/a

Fixed · RHSA-2005:801

Product	Package	State	Advisory
Red Hat Desktop version 3	n/a	Fixed	RHBA-2005:675
Red Hat Enterprise Linux 3	binutils-0:2.14.90.0.4-39	Fixed	RHSA-2005:659
Red Hat Enterprise Linux 3	elfutils-0:0.94.1-2	Fixed	RHSA-2006:0368
Red Hat Enterprise Linux 4	binutils-0:2.15.92.0.2-15	Fixed	RHSA-2005:673
Red Hat Enterprise Linux 4	elfutils-0:0.97.1-3	Fixed	RHSA-2006:0354
Red Hat Enterprise Linux 4	gdb-0:6.3.0.0-1.63	Fixed	RHSA-2005:709
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2005:763
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2005:801
Red Hat Enterprise Linux AS version 3	n/a	Fixed	RHBA-2005:675
Red Hat Enterprise Linux ES version 2.1	n/a	Fixed	RHSA-2005:801
Red Hat Enterprise Linux ES version 2.1	n/a	Fixed	RHSA-2005:763
Red Hat Enterprise Linux ES version 3	n/a	Fixed	RHBA-2005:675
Red Hat Enterprise Linux WS version 2.1	n/a	Fixed	RHSA-2005:763
Red Hat Enterprise Linux WS version 2.1	n/a	Fixed	RHSA-2005:801
Red Hat Enterprise Linux WS version 3	n/a	Fixed	RHBA-2005:675
Red Hat Linux Advanced Workstation 2.1	n/a	Fixed	RHSA-2005:763
Red Hat Linux Advanced Workstation 2.1	n/a	Fixed	RHSA-2005:801

Remediation

Red Hat statement

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

Metrics

0.60% 0.00600

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00600

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.60% (0.00600)	46.75th	v5 (v2026.06.15)
Jun 15, 2026	0.60% (0.00600)	43.84th	v5 (v2026.06.15)
Mar 17, 2025	0.22% (0.00220)	42.60th	v4 (v2025.03.14)
Dec 12, 2024	0.12% (0.00116)	47.13th	v3 (v2023.03.01)
Apr 30, 2024	0.12% (0.00116)	44.92th	v3 (v2023.03.01)
Mar 7, 2023	0.14% (0.00138)	47.49th	v3 (v2023.03.01)
Mar 6, 2023	3.05% (0.03054)	83.72th	v2 (v2022.01.01)
Apr 1, 2022	3.05% (0.03054)	82.05th	v2 (v2022.01.01)
Feb 4, 2022	3.05% (0.03054)	64.53th	v2 (v2022.01.01)

Weaknesses (1)

CWE-189

References (42)

ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
vendor-advisoryx_refsource_SGI
http://bugs.gentoo.org/show_bug.cgi?id=91398
x_refsource_CONFIRM
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060
vendor-advisoryx_refsource_CONECTIVA
http://secunia.com/advisories/15527
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17001
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17072
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17135
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17257
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17356
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17718
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/18506
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21122
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21262
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21717
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/24788
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.gentoo.org/glsa/glsa-200505-15.xml
vendor-advisoryx_refsource_GENTOOVendor Advisory
http://securitytracker.com/id?1016544
vdb-entryx_refsource_SECTRACK
http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf
x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm
x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm
x_refsource_CONFIRM
http://www.gentoo.org/security/en/glsa/glsa-200506-01.xml
vendor-advisoryx_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=MDKSA-2005:095
vendor-advisoryx_refsource_MANDRAKE
http://www.mandriva.com/security/advisories?name=MDKSA-2005:215
vendor-advisoryx_refsource_MANDRAKE
http://www.osvdb.org/16757
vdb-entryx_refsource_OSVDB
http://www.redhat.com/support/errata/RHSA-2005-659.html
vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-673.html
vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-709.html
vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-763.html
vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-801.html
vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0354.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2006-0368.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/464745/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/13697
vdb-entryx_refsource_BID
http://www.trustix.org/errata/2005/0025/
vendor-advisoryx_refsource_TRUSTIX
http://www.vmware.com/support/vi3/doc/esx-55052-patch.html
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/1267
vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2005-1704
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617660
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2005-1704
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071
vdb-entrysignaturex_refsource_OVAL
https://usn.ubuntu.com/136-1/
vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2005-1704

Link	Providers	Tags
ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc		vendor-advisoryx_refsource_SGI
http://bugs.gentoo.org/show_bug.cgi?id=91398		x_refsource_CONFIRM
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060		vendor-advisoryx_refsource_CONECTIVA
http://secunia.com/advisories/15527		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17001		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17072		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17135		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17257		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17356		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/17718		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/18506		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21122		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21262		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21717		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/24788		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://security.gentoo.org/glsa/glsa-200505-15.xml		vendor-advisoryx_refsource_GENTOOVendor Advisory
http://securitytracker.com/id?1016544		vdb-entryx_refsource_SECTRACK
http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf		x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm		x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm		x_refsource_CONFIRM
http://www.gentoo.org/security/en/glsa/glsa-200506-01.xml		vendor-advisoryx_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=MDKSA-2005:095		vendor-advisoryx_refsource_MANDRAKE
http://www.mandriva.com/security/advisories?name=MDKSA-2005:215		vendor-advisoryx_refsource_MANDRAKE
http://www.osvdb.org/16757		vdb-entryx_refsource_OSVDB
http://www.redhat.com/support/errata/RHSA-2005-659.html		vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-673.html		vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-709.html		vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-763.html		vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-801.html		vendor-advisoryx_refsource_REDHATVendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0354.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2006-0368.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/archive/1/464745/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/13697		vdb-entryx_refsource_BID
http://www.trustix.org/errata/2005/0025/		vendor-advisoryx_refsource_TRUSTIX
http://www.vmware.com/support/vi3/doc/esx-55052-patch.html		x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/1267		vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2005-1704		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617660		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2005-1704
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071		vdb-entrysignaturex_refsource_OVAL
https://usn.ubuntu.com/136-1/		vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2005-1704

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 24, 2005

Updated Aug 7, 2024

Reserved May 24, 2005

Link CVE-2005-1704

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1704

Red Hat

Severity Low

Public date May 25, 2005

Links CVE-2005-1704 - Bugzilla