CVE-2005-0605

21

FAUCET Score

CVE-2005-0605 describes a buffer overflow vulnerability in the scan.c component of LibXPM, affecting various Linux distributions and X Window System implementations such as X.org and XFree86. This flaw, triggered by a negative bitmap_unit value, allows unauthenticated attackers to execute arbitrary code remotely with low attack complexity. While rated with a CVSS score of 7.5, indicating significant potential for confidentiality, integrity, and availability impact, there is no evidence of active exploitation, publicly available exploit code, or notable community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		0.93.94CPE matchmatch criteria	cpe:2.3:a:lesstif:lesstif:0.93.94:::::::*
		3.0CPE matchmatch criteria	cpe:2.3:a:sgi:propack:3.0:::::::*
		6.7.0CPE matchmatch criteria	cpe:2.3:a:x.org:x11r6:6.7.0:::::::*
		6.8CPE matchmatch criteria	cpe:2.3:a:x.org:x11r6:6.8:::::::*
		6.8.1CPE matchmatch criteria	cpe:2.3:a:x.org:x11r6:6.8.1:::::::*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Exploitability Score

10.0

Impact Score

6.4

CvssVersion

2.0

Exploit Intelligence

EPSS Score

4.51%

Probability of exploitation in next 30 days

EPSS Percentile

90.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0451 is in the 83rd percentile among its peer group of 51,466 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (43)

debianpatch availablevia nvd_reference

gentoopatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 3Fixed in: openmotif-0:2.2.3-5.RHEL3.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 3Fixed in: openmotif21-0:2.1.30-9.RHEL3.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 4Fixed in: fonts-xorg-0:6.8.1.1-1.EL.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 4Fixed in: xorg-x11-0:6.8.2-1.EL.13.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 4Fixed in: openmotif-0:2.2.3-9.RHEL4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 4Fixed in: openmotif21-0:2.1.30-11.RHEL4.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux AS (Advanced Server) version 2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux ES version 2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux WS version 2.1

redhatpatch availablevia redhat_api

Product: Red Hat Linux Advanced Workstation 2.1

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jabberd-0:2.0s10-3.37.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: openmotif21-0:2.1.30-9.RHEL3.8

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: perl-Crypt-CBC-0:2.24-1.el3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modperl-0:1.29-16.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel3

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jabberd-0:2.0s10-3.38.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: jfreechart-0:0.9.20-3.rhn

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: openmotif21-0:2.1.30-11.RHEL4.6

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: perl-Crypt-CBC-0:2.24-1.el4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-apache-0:1.3.27-36.rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modjk-0:1.2.23-2rhn.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modperl-0:1.29-16.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-modssl-0:2.8.12-8.rhn.10.rhel4

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.0Fixed in: tomcat5-0:5.0.30-0jpp_10rh

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 3Fixed in: XFree86-0:4.3.0-81.EL

Vendor Advisories (1)

redhatCVE-2005-0605Moderate

libxpm buffer overflow

References

ftp.sco.com / pub/updates/OpenServer/SCOSA-2006.5/SCOSA-2006.5.txt

ftp.sco.com / pub/updates/UnixWare/SCOSA-2005.57/SCOSA-2005.57.txt

patches.sgi.com / support/free/security/advisories/20060403-01-U

bugs.gentoo.org / show_bug.cgi

PatchVendor Advisory

bugs.gentoo.org / show_bug.cgi

PatchVendor Advisory

lists.apple.com / archives/security-announce/2005/Aug/msg00000.html

lists.apple.com / archives/security-announce/2005//Aug/msg00001.html

bugs.freedesktop.org / attachment.cgi

Vendor Advisory

secunia.com / advisories/14460

secunia.com / advisories/18049

secunia.com / advisories/18316

secunia.com / advisories/19624

security.gentoo.org / glsa/glsa-200503-08.xml

PatchVendor Advisory

securitytracker.com / id

PatchVendor Advisory

oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10411

usn.ubuntu.com / 92-1

usn.ubuntu.com / 97-1

debian.org / security/2005/dsa-723

PatchVendor Advisory

gentoo.org / security/en/glsa/glsa-200503-15.xml

PatchVendor Advisory

redhat.com / archives/fedora-legacy-announce/2006-January/msg00001.html

redhat.com / support/errata/RHSA-2005-044.html

redhat.com / support/errata/RHSA-2005-198.html

redhat.com / support/errata/RHSA-2005-331.html

PatchVendor Advisory

redhat.com / support/errata/RHSA-2005-412.html

redhat.com / support/errata/RHSA-2005-473.html

redhat.com / support/errata/RHSA-2008-0261.html

securityfocus.com / bid/12714

PatchVendor Advisory