CVE-2004-0138

Severity Score

4.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.

*Credits: N/A

CVSS Scores

NISTv2 4.9

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-02-11 CVE Reserved
2004-12-31 CVE Published
2023-10-24 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (18)

URL	Tag	Source
http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes	X_refsource_confirm
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25	X_refsource_confirm
http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg	X_refsource_confirm
http://secunia.com/advisories/20338	Third Party Advisory
http://www.securityfocus.com/bid/18174	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43124	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10123	Signature

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/20162	2023-11-07
http://secunia.com/advisories/20163	2023-11-07
http://secunia.com/advisories/20202	2023-11-07
http://www.debian.org/security/2006/dsa-1067	2023-11-07
http://www.debian.org/security/2006/dsa-1069	2023-11-07
http://www.debian.org/security/2006/dsa-1070	2023-11-07
http://www.debian.org/security/2006/dsa-1082	2023-11-07

URL	Date	SRC
http://www.redhat.com/support/errata/RHSA-2004-504.html	2023-11-07
http://www.redhat.com/support/errata/RHSA-2004-549.html	2023-11-07
https://access.redhat.com/security/cve/CVE-2004-0138	2004-12-02
https://bugzilla.redhat.com/show_bug.cgi?id=1617159	2004-12-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.0 Search vendor "Linux" for product "Linux Kernel" and version "2.4.0"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.1 Search vendor "Linux" for product "Linux Kernel" and version "2.4.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.2 Search vendor "Linux" for product "Linux Kernel" and version "2.4.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.3 Search vendor "Linux" for product "Linux Kernel" and version "2.4.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.4 Search vendor "Linux" for product "Linux Kernel" and version "2.4.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.5 Search vendor "Linux" for product "Linux Kernel" and version "2.4.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.6 Search vendor "Linux" for product "Linux Kernel" and version "2.4.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.7 Search vendor "Linux" for product "Linux Kernel" and version "2.4.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.8 Search vendor "Linux" for product "Linux Kernel" and version "2.4.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.9 Search vendor "Linux" for product "Linux Kernel" and version "2.4.9"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.10 Search vendor "Linux" for product "Linux Kernel" and version "2.4.10"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.11 Search vendor "Linux" for product "Linux Kernel" and version "2.4.11"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.12 Search vendor "Linux" for product "Linux Kernel" and version "2.4.12"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.13 Search vendor "Linux" for product "Linux Kernel" and version "2.4.13"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.14 Search vendor "Linux" for product "Linux Kernel" and version "2.4.14"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.15 Search vendor "Linux" for product "Linux Kernel" and version "2.4.15"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.16 Search vendor "Linux" for product "Linux Kernel" and version "2.4.16"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.17 Search vendor "Linux" for product "Linux Kernel" and version "2.4.17"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.18 Search vendor "Linux" for product "Linux Kernel" and version "2.4.18"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.19 Search vendor "Linux" for product "Linux Kernel" and version "2.4.19"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.20 Search vendor "Linux" for product "Linux Kernel" and version "2.4.20"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.21 Search vendor "Linux" for product "Linux Kernel" and version "2.4.21"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.22 Search vendor "Linux" for product "Linux Kernel" and version "2.4.22"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.23 Search vendor "Linux" for product "Linux Kernel" and version "2.4.23"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.24 Search vendor "Linux" for product "Linux Kernel" and version "2.4.24"		-		Affected