CVE-2005-2370
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0,...
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
Exploit likelihood
What each source reports
NVD Score used
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
- Record
CVE-2005-2370- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
- Record
CVE-2005-2370- Updated
- 2026-11-02
EUVDEUVD-2005-2371 No score
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
- Record
EUVD-2005-2371- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qj76-x84q-4mvg No score
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0,...
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
- Record
GHSA-qj76-x84q-4mvg- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ekgDebian:3.1 From an advisory covering 5 CVEs |
before 1:1.5+20050411-7, plus listed versions 1:1.5+20050411-31:1.5+20050411-41:1.5+20050411-51:1.5+20050411-6 |
1:1.5+20050411-7 |
ekgDebian:4.0 From an advisory covering 5 CVEs |
before 1:1.7~rc2-1etch1, plus listed versions 1:1.7~rc2-1 |
1:1.7~rc2-1etch1 |
gaimDebian:3.1 |
before 1:1.2.1-1.4, plus listed versions 1:1.2.1-1.11:1.2.1-1.3 |
1:1.2.1-1.4 |
centericqDebian:3.1 From an advisory covering 3 CVEs |
before 4.20.0-1sarge2, plus listed versions 4.20.0-14.20.0-1sarge1 |
4.20.0-1sarge2 |
centericqDebian:4.0 From an advisory covering 4 CVEs |
before 4.20.0-8etch1 | 4.20.0-8etch1 |
gaimDebian:4.0 From an advisory covering 3 CVEs |
before 1:1.4.0-5etch2 | 1:1.4.0-5etch2 |
kdenetworkRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-nowlisteningRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kdenetworkRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-nowlisteningRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetworkRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-nowlisteningRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetworkRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
kdenetwork-nowlisteningRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 7:3.3.1-2.3 | 7:3.3.1-2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2370 is a medium vulnerability (CVSS 5.0) in Ekg, published July 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. Fixed in gaim 1:1.2.1-1.4.
References
gaim.sourceforge.net/security/index.php?id=20
securityfocus.com/archive/1/426078/100/0/threaded
marc.info?l=bugtraq&m=112198499417250&w=2
secunia.com/advisories/16265
debian.org/security/2005/dsa-813
Show 25 moreShow less
redhat.com/support/errata/RHSA-2005-627.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10456
nvd.nist.gov/vuln/detail/CVE-2005-2370
github.com/advisories/GHSA-qj76-x84q-4mvg
access.redhat.com/errata/RHSA-2005:639
kde.org/info/security/advisory-20050721-1.txt
bugzilla.redhat.com/show_bug.cgi?id=163811
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_639.json
cve.org/CVERecord?id=CVE-2005-1852