CVE-2004-0077: High severity redhat Kernel Doc vulnerability
Published Mar 3, 2004
·Updated
The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
Affected Software
111 affected components
redhat Kernel Doc=2.4.20-8
redhat Kernel=2.4.20-8
redhat Bigmem Kernel=2.4.20-8
redhat Kernel=2.4.20-8
redhat Kernel=2.4.20-8
redhat Kernel Source=2.4.20-8
Linux Linux kernel=2.2.0
Linux Linux kernel=2.2.1
Linux Linux kernel=2.2.2
Linux Linux kernel=2.2.3
Linux Linux kernel=2.2.4
Linux Linux kernel=2.2.5
Linux Linux kernel=2.2.6
Linux Linux kernel=2.2.7
Linux Linux kernel=2.2.8
Linux Linux kernel=2.2.9
Linux Linux kernel=2.2.10
Linux Linux kernel=2.2.11
Linux Linux kernel=2.2.12
Linux Linux kernel=2.2.13
Linux Linux kernel=2.2.14
Linux Linux kernel=2.2.15
Linux Linux kernel=2.2.15-pre16
Linux Linux kernel=2.2.15_pre20
Linux Linux kernel=2.2.16
Linux Linux kernel=2.2.16-pre6
Linux Linux kernel=2.2.17
Linux Linux kernel=2.2.18
Linux Linux kernel=2.2.19
Linux Linux kernel=2.2.20
Linux Linux kernel=2.2.21
Linux Linux kernel=2.2.22
Linux Linux kernel=2.2.23
Linux Linux kernel=2.2.24
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.3
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.5
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.7
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.9
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.11
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.14
Linux Linux kernel=2.4.15
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.17
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.18-pre7
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.4.19-pre5
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.21-pre1
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.23
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.24
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6_test9_cvs
Netwosix Netwosix Linux=1.0
Trustix Secure Linux=1.5
Trustix Secure Linux=2.0
redhat Kernel=2.4.20-8
redhat Kernel=2.4.20-8
Remediation
Patch Available
Patch Available
Patch Available
Event History
Mar 3, 2004
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0077?
CVE-2004-0077 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2004-0077?
To mitigate CVE-2004-0077, users should upgrade to Linux kernel version 2.6.3 or later.
3
What systems are affected by CVE-2004-0077?
CVE-2004-0077 affects Linux kernel versions from 2.2 up to 2.6.2.
4
Can CVE-2004-0077 be exploited remotely?
CVE-2004-0077 requires local access to the system, hence it cannot be exploited remotely.
5
What types of attacks can exploit CVE-2004-0077?
CVE-2004-0077 allows local users to gain root privileges on the affected system.