CVE-2004-1333: Buffer Overflow
Published Dec 15, 2004
·Updated
Integer overflow in the vcresize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.
Affected Software
104 affected components
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.3
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.5
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.7
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.9
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.11
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.14
Linux Linux kernel=2.4.15
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.17
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.18-pre7
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.4.19-pre5
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.21-pre1
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.23
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.23_ow2
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.25
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.27
Linux Linux kernel=2.4.27-pre1
Linux Linux kernel=2.4.27-pre2
Linux Linux kernel=2.4.27-pre3
Linux Linux kernel=2.4.27-pre4
Linux Linux kernel=2.4.27-pre5
Linux Linux kernel=2.4.28
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6_test9_cvs
redhat Fedora Core=core_1.0
redhat Fedora Core=core_2.0
redhat Fedora Core=core_3.0
redhat Linux=7.3
redhat Linux=7.3
redhat Linux=7.3
redhat Linux=9.0
Remediation
Patch Available
Patch Available
Event History
Dec 15, 2004
CVE Published
via NVD·05:00 AM
Jan 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1333?
CVE-2004-1333 is classified as a medium severity vulnerability due to its potential to cause a denial of service through a kernel crash.
2
How do I fix CVE-2004-1333?
To mitigate CVE-2004-1333, upgrade to Linux kernel version 2.6.10 or later, which contains the necessary patches.
3
Who is affected by CVE-2004-1333?
Local users of Linux kernel versions 2.4 and 2.6 before 2.6.10 are at risk from CVE-2004-1333.
4
What is the impact of CVE-2004-1333 on systems?
CVE-2004-1333 can lead to a denial of service by allowing a local user to crash the kernel through buffer overflow.
5
Is CVE-2004-1333 still a concern for modern systems?
CVE-2004-1333 primarily affects older Linux kernel versions, so it is less relevant for modern systems running recent kernels.