Vulnerability in Linux Kernel
CVE-2004-0077
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
EPSS: 0.024 (83.4th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.2.0, 2.2.1, 2.2.2
- Netwosix Netwosix_linux — versions 1.0
- Trustix Secure_linux — versions 1.5, 2.0
- Redhat Bigmem_kernel — versions 2.4.20-8
- Redhat Kernel — versions 2.4.20-8
- Redhat Kernel_doc — versions 2.4.20-8
- Redhat Kernel_source — versions 2.4.20-8
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, x_refsource_SLACKWARE)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2004-0077?
- CVE-2004-0077 is a vulnerability in Linux Kernel. Published 2004-03-03.
- Is CVE-2004-0077 known to be exploited?
- 59 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.