CVE-2004-1074

Public Exploit

Description

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.

2.1

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.34%

Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory fedora.us Vendor Advisory debian.org Vendor Advisory trustix.org Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory com.br Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://marc.info/?l=bugtraq&m=110322596918807&w=2	mailing list
http://secunia.com/advisories/20163	third party advisory
http://www.debian.org/security/2006/dsa-1082	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:022	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18290	vdb entry
http://marc.info/?l=linux-kernel&m=110021173607372&w=2	mailing list
https://bugzilla.fedora.us/show_bug.cgi?id=2336	vendor advisory
http://www.debian.org/security/2006/dsa-1070	vendor advisory
http://secunia.com/advisories/20162	third party advisory
http://www.trustix.org/errata/2005/0001/	vendor advisory
http://www.securityfocus.com/bid/11754	exploit vdb entry patch vendor advisory
http://www.debian.org/security/2006/dsa-1067	vendor advisory
http://www.debian.org/security/2006/dsa-1069	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9751	vdb entry signature
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930	vendor advisory
http://secunia.com/advisories/20202	third party advisory
http://secunia.com/advisories/20338	third party advisory

Frequently Asked Questions

What is the severity of CVE-2004-1074?: CVE-2004-1074 has been scored as a low severity vulnerability.
How to fix CVE-2004-1074?: To fix CVE-2004-1074, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-1074 being actively exploited in the wild?: It is possible that CVE-2004-1074 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.