Lucene search
HistoryJan 21, 2005 - 5:00 a.m.
CVE-2004-1057
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.3%
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.
Affected configurations
Node
linuxlinux_kernelRange≤2.4.19
ORlinuxlinux_kernelMatch2.0
ORlinuxlinux_kernelMatch2.0.1
ORlinuxlinux_kernelMatch2.0.2
ORlinuxlinux_kernelMatch2.0.3
ORlinuxlinux_kernelMatch2.0.4
ORlinuxlinux_kernelMatch2.0.5
ORlinuxlinux_kernelMatch2.0.6
ORlinuxlinux_kernelMatch2.0.7
ORlinuxlinux_kernelMatch2.0.8
ORlinuxlinux_kernelMatch2.0.9
ORlinuxlinux_kernelMatch2.0.9.9
ORlinuxlinux_kernelMatch2.0.10
ORlinuxlinux_kernelMatch2.0.11
ORlinuxlinux_kernelMatch2.0.12
ORlinuxlinux_kernelMatch2.0.13
ORlinuxlinux_kernelMatch2.0.14
ORlinuxlinux_kernelMatch2.0.15
ORlinuxlinux_kernelMatch2.0.16
ORlinuxlinux_kernelMatch2.0.17
ORlinuxlinux_kernelMatch2.0.18
ORlinuxlinux_kernelMatch2.0.19
ORlinuxlinux_kernelMatch2.0.20
ORlinuxlinux_kernelMatch2.0.21
ORlinuxlinux_kernelMatch2.0.22
ORlinuxlinux_kernelMatch2.0.23
ORlinuxlinux_kernelMatch2.0.24
ORlinuxlinux_kernelMatch2.0.25
ORlinuxlinux_kernelMatch2.0.26
ORlinuxlinux_kernelMatch2.0.27
ORlinuxlinux_kernelMatch2.0.28
ORlinuxlinux_kernelMatch2.0.29
ORlinuxlinux_kernelMatch2.0.30
ORlinuxlinux_kernelMatch2.0.31
ORlinuxlinux_kernelMatch2.0.32
ORlinuxlinux_kernelMatch2.0.33
ORlinuxlinux_kernelMatch2.0.34
ORlinuxlinux_kernelMatch2.0.35
ORlinuxlinux_kernelMatch2.0.36
ORlinuxlinux_kernelMatch2.0.37
ORlinuxlinux_kernelMatch2.0.38
ORlinuxlinux_kernelMatch2.0.39
ORlinuxlinux_kernelMatch2.1
ORlinuxlinux_kernelMatch2.1.89
ORlinuxlinux_kernelMatch2.2.0
ORlinuxlinux_kernelMatch2.2.1
ORlinuxlinux_kernelMatch2.2.2
ORlinuxlinux_kernelMatch2.2.3
ORlinuxlinux_kernelMatch2.2.4
ORlinuxlinux_kernelMatch2.2.5
ORlinuxlinux_kernelMatch2.2.6
ORlinuxlinux_kernelMatch2.2.7
ORlinuxlinux_kernelMatch2.2.8
ORlinuxlinux_kernelMatch2.2.9
ORlinuxlinux_kernelMatch2.2.10
ORlinuxlinux_kernelMatch2.2.11
ORlinuxlinux_kernelMatch2.2.12
ORlinuxlinux_kernelMatch2.2.13
ORlinuxlinux_kernelMatch2.2.14
ORlinuxlinux_kernelMatch2.2.15
ORlinuxlinux_kernelMatch2.2.15pre16
ORlinuxlinux_kernelMatch2.2.15_pre20
ORlinuxlinux_kernelMatch2.2.16
ORlinuxlinux_kernelMatch2.2.16pre6
ORlinuxlinux_kernelMatch2.2.17
ORlinuxlinux_kernelMatch2.2.18
ORlinuxlinux_kernelMatch2.2.19
ORlinuxlinux_kernelMatch2.2.20
ORlinuxlinux_kernelMatch2.2.21
ORlinuxlinux_kernelMatch2.2.22
ORlinuxlinux_kernelMatch2.2.23
ORlinuxlinux_kernelMatch2.2.24
ORlinuxlinux_kernelMatch2.2.25
ORlinuxlinux_kernelMatch2.2.27rc2
ORlinuxlinux_kernelMatch2.3.0
ORlinuxlinux_kernelMatch2.3.99
ORlinuxlinux_kernelMatch2.3.99pre1
ORlinuxlinux_kernelMatch2.3.99pre2
ORlinuxlinux_kernelMatch2.3.99pre3
ORlinuxlinux_kernelMatch2.3.99pre4
ORlinuxlinux_kernelMatch2.3.99pre5
ORlinuxlinux_kernelMatch2.3.99pre6
ORlinuxlinux_kernelMatch2.3.99pre7
ORlinuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.0test1
ORlinuxlinux_kernelMatch2.4.0test10
ORlinuxlinux_kernelMatch2.4.0test11
ORlinuxlinux_kernelMatch2.4.0test12
ORlinuxlinux_kernelMatch2.4.0test2
ORlinuxlinux_kernelMatch2.4.0test3
ORlinuxlinux_kernelMatch2.4.0test4
ORlinuxlinux_kernelMatch2.4.0test5
ORlinuxlinux_kernelMatch2.4.0test6
ORlinuxlinux_kernelMatch2.4.0test7
ORlinuxlinux_kernelMatch2.4.0test8
ORlinuxlinux_kernelMatch2.4.0test9
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
ORlinuxlinux_kernelMatch2.4.18x86
ORlinuxlinux_kernelMatch2.4.18pre1
ORlinuxlinux_kernelMatch2.4.18pre2
ORlinuxlinux_kernelMatch2.4.18pre3
ORlinuxlinux_kernelMatch2.4.18pre4
ORlinuxlinux_kernelMatch2.4.18pre5
ORlinuxlinux_kernelMatch2.4.18pre6
ORlinuxlinux_kernelMatch2.4.18pre7
ORlinuxlinux_kernelMatch2.4.18pre8
ORlinuxlinux_kernelMatch2.4.19pre1
ORlinuxlinux_kernelMatch2.4.19pre2
ORlinuxlinux_kernelMatch2.4.19pre3
ORlinuxlinux_kernelMatch2.4.19pre4
ORlinuxlinux_kernelMatch2.4.19pre5
ORlinuxlinux_kernelMatch2.4.19pre6
ORlinuxlinux_kernelMatch2.6.20.1
ORredhatenterprise_linuxMatch2.1advanced_server
ORredhatenterprise_linuxMatch2.1advanced_server_ia64
ORredhatenterprise_linuxMatch2.1enterprise_server
ORredhatenterprise_linuxMatch2.1enterprise_server_ia64
ORredhatenterprise_linuxMatch2.1workstation
ORredhatenterprise_linuxMatch2.1workstation_ia64
ORredhatenterprise_linuxMatch3.0advanced_servers
ORredhatenterprise_linuxMatch3.0enterprise_server
ORredhatenterprise_linuxMatch3.0workstation
ORredhatenterprise_linuxMatch4.0advanced_server
ORredhatenterprise_linuxMatch4.0enterprise_server
ORredhatenterprise_linuxMatch4.0workstation
References
secunia.com/advisories/18562
www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4
www.redhat.com/support/errata/RHSA-2005-016.html
www.redhat.com/support/errata/RHSA-2005-017.html
www.redhat.com/support/errata/RHSA-2006-0140.html
www.securityfocus.com/bid/12338
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=137821
exchange.xforce.ibmcloud.com/vulnerabilities/19275
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11474
Related
ubuntucve
ubuntucve
CVE-2004-1057
2005-01-21 00:00:00
cve
cve
CVE-2004-1057
2005-01-29 05:00:00
cvelist
cvelist
CVE-2004-1057
2005-01-29 05:00:00
redhat
redhat
(RHSA-2005:016) kernel security update
2005-01-21 00:00:00
(RHSA-2005:017) kernel security update
2005-01-21 00:00:00
(RHSA-2006:0140) kernel security update
2006-01-19 00:00:00
nessus
nessus
RHEL 2.1 : kernel (RHSA-2005:016)
2005-01-25 00:00:00
RHEL 3 : kernel (RHSA-2006:0140)
2006-01-20 00:00:00
CentOS 3 : kernel (CESA-2006:0140)
2006-07-03 00:00:00
centos
centos
kernel security update
2006-01-19 22:25:06
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.3%
Related for NVD:CVE-2004-1057