CVE-2004-0138

Published: Dec 31, 2004Modified: Apr 16, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.

Affected (25)

Products: Linux: Linux Kernel

1 product

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.4.0
Linux Linux Kernel	Version 2.4.10
Linux Linux Kernel	Version 2.4.11
Linux Linux Kernel	Version 2.4.12
Linux Linux Kernel	Version 2.4.13
Linux Linux Kernel	Version 2.4.14
Linux Linux Kernel	Version 2.4.15
Linux Linux Kernel	Version 2.4.16
Linux Linux Kernel	Version 2.4.17
Linux Linux Kernel	Version 2.4.18
Linux Linux Kernel	Version 2.4.19
Linux Linux Kernel	Version 2.4.1
Linux Linux Kernel	Version 2.4.20
Linux Linux Kernel	Version 2.4.21
Linux Linux Kernel	Version 2.4.22
Linux Linux Kernel	Version 2.4.23
Linux Linux Kernel	Version 2.4.24
Linux Linux Kernel	Version 2.4.2
Linux Linux Kernel	Version 2.4.3
Linux Linux Kernel	Version 2.4.4
Linux Linux Kernel	Version 2.4.5
Linux Linux Kernel	Version 2.4.6
Linux Linux Kernel	Version 2.4.7
Linux Linux Kernel	Version 2.4.8
Linux Linux Kernel	Version 2.4.9

References (32)

http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes

Source: cve@mitre.org

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25

Source: cve@mitre.org

http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg

Source: cve@mitre.org

http://secunia.com/advisories/20162

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20163

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20202

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20338

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1067

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1069

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1070

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1082

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2004-504.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-549.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/18174

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43124

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10123

Source: cve@mitre.org

http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes

Source: af854a3a-2127-422b-91ae-364da2661108

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25

Source: af854a3a-2127-422b-91ae-364da2661108

http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20162

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20163

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20202

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20338

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1067

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1069

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1070

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1082

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2004-504.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-549.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18174

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/43124

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10123

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.