CVE-2004-2302

Severity Score

2.6

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files.

*Credits: N/A

CVSS Scores

NISTv2 2.6

Attack Vector

Local

Attack Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-12-31 CVE Published
2005-08-08 CVE Reserved
2023-03-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source
http://secunia.com/advisories/17826	Third Party Advisory
http://secunia.com/advisories/18056	Third Party Advisory
http://www.securityfocus.com/bid/13091	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.10-rc1/2.6.10-rc1-mm1/broken-out/fix-race-in-sysfs_read_file-and-sysfs_write_file.patch	2017-02-19
http://linux.bkbits.net:8080/linux-2.6/cset%404186a4deVoR88JjTwMa3ZnIp-_YJsA	2017-02-19
http://www.novell.com/linux/security/advisories/2005_44_kernel.html	2017-02-19

URL	Date	SRC
http://www.debian.org/security/2005/dsa-922	2017-02-19
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218	2017-02-19
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219	2017-02-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.10"		-		Affected