CVE-2004-0075: Low severity Linux Linux kernel vulnerability
Published Mar 15, 2004
·Updated
The Vicam USB driver in Linux before 2.4.25 does not use the copyfromuser function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.
Affected Software
58 affected components
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.15
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.4.11
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.4.17
Linux Linux kernel=2.4.21-pre1
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.23_ow2
Linux Linux kernel=2.4.23
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.7
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.9
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.14
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.19-pre5
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.5
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.3
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.4.18-pre7
Remediation
Patch Available
Patch Available
Event History
Mar 15, 2004
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0075?
CVE-2004-0075 has a moderate severity level as it allows local users to cause a denial of service.
2
How do I fix CVE-2004-0075?
To fix CVE-2004-0075, upgrade to a version of the Linux kernel that is 2.4.25 or later.
3
Which Linux kernel versions are affected by CVE-2004-0075?
CVE-2004-0075 affects various Linux kernel versions prior to 2.4.25, including 2.4.18-pre1, 2.4.15, and several others.
4
Can CVE-2004-0075 be exploited by remote attackers?
No, CVE-2004-0075 can only be exploited by local users with system access.
5
What impact does CVE-2004-0075 have on system performance?
CVE-2004-0075 allows local users to cause a denial of service, potentially impacting system availability.