CVE-2004-0077
UnknownEPSS 2.43%
Last modified
CVE-2004-0077 is a vulnerability of currently unknown severity. The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.. EPSS estimates a 2.43% chance of exploitation in the next 30 days.
Description
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Redhat | Bigmem Kernel | 2.4.20-8 | — |
| Redhat | Kernel | 2.4.20-8 | — |
| Redhat | Kernel Doc | 2.4.20-8 | — |
| Redhat | Kernel Source | 2.4.20-8 | — |
| Linux | Linux Kernel | 2.2.0 | — |
| Linux | Linux Kernel | 2.2.1 | — |
| Linux | Linux Kernel | 2.2.2 | — |
| Linux | Linux Kernel | 2.2.3 | — |
| Linux | Linux Kernel | 2.2.4 | — |
| Linux | Linux Kernel | 2.2.5 | — |
| Linux | Linux Kernel | 2.2.6 | — |
| Linux | Linux Kernel | 2.2.7 | — |
| Linux | Linux Kernel | 2.2.8 | — |
| Linux | Linux Kernel | 2.2.9 | — |
| Linux | Linux Kernel | 2.2.10 | — |
| Linux | Linux Kernel | 2.2.11 | — |
| Linux | Linux Kernel | 2.2.12 | — |
| Linux | Linux Kernel | 2.2.13 | — |
| Linux | Linux Kernel | 2.2.14 | — |
| Linux | Linux Kernel | 2.2.15 | — |
| Linux | Linux Kernel | 2.2.15_pre20 | — |
| Linux | Linux Kernel | 2.2.16 | — |
| Linux | Linux Kernel | 2.2.17 | — |
| Linux | Linux Kernel | 2.2.18 | — |
| Linux | Linux Kernel | 2.2.19 | — |
| Linux | Linux Kernel | 2.2.20 | — |
| Linux | Linux Kernel | 2.2.21 | — |
| Linux | Linux Kernel | 2.2.22 | — |
| Linux | Linux Kernel | 2.2.23 | — |
| Linux | Linux Kernel | 2.2.24 | — |
| Linux | Linux Kernel | 2.4.0 | — |
| Linux | Linux Kernel | 2.4.1 | — |
| Linux | Linux Kernel | 2.4.2 | — |
| Linux | Linux Kernel | 2.4.3 | — |
| Linux | Linux Kernel | 2.4.4 | — |
| Linux | Linux Kernel | 2.4.5 | — |
| Linux | Linux Kernel | 2.4.6 | — |
| Linux | Linux Kernel | 2.4.7 | — |
| Linux | Linux Kernel | 2.4.8 | — |
| Linux | Linux Kernel | 2.4.9 | — |
| Linux | Linux Kernel | 2.4.10 | — |
| Linux | Linux Kernel | 2.4.11 | — |
| Linux | Linux Kernel | 2.4.12 | — |
| Linux | Linux Kernel | 2.4.13 | — |
| Linux | Linux Kernel | 2.4.14 | — |
| Linux | Linux Kernel | 2.4.15 | — |
| Linux | Linux Kernel | 2.4.16 | — |
| Linux | Linux Kernel | 2.4.17 | — |
| Linux | Linux Kernel | 2.4.18 | — |
| Linux | Linux Kernel | 2.4.19 | — |
Showing 50 of 62 affected configurations. See NVD for the full list.
References
- http://security.gentoo.org/glsa/glsa-200403-02.xmlPatch, Vendor Advisory
- http://www.debian.org/security/2004/dsa-439Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/981222US Government Resource
- http://www.securityfocus.com/bid/9686Exploit, Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200403-02.xmlPatch, Vendor Advisory
- http://www.debian.org/security/2004/dsa-439Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/981222US Government Resource
- http://www.securityfocus.com/bid/9686Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-0077?
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
How severe is CVE-2004-0077?
Severity scoring for CVE-2004-0077 is pending analysis. The EPSS model estimates a 2.43% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0077?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-0071Directory traversal vulnerability in buildManPage in class.m…
- CVE-2004-0072Directory traversal vulnerability in Accipiter Direct Server…
- CVE-2004-0073PHP remote file inclusion vulnerability in (1) config.php an…
- CVE-2004-0074Multiple buffer overflows in xsok 1.02 allows local users to…
- CVE-2004-0075The Vicam USB driver in Linux before 2.4.25 does not use the…
- CVE-2004-0076Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2004-0078Buffer overflow in the index menu code (menu_pad_string of m…
- CVE-2004-0079The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.…7.5
- CVE-2004-0080The login program in util-linux 2.11 and earlier uses a poin…
- CVE-2004-0081OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown…
- CVE-2004-0082The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0…
- CVE-2004-0083Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4…
Are you affected by CVE-2004-0077?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST