Vulnerability Details : CVE-2004-0427
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
Vulnerability category: Denial of service
Products affected by CVE-2004-0427
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-0427
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 14 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-0427
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST |
CWE ids for CVE-2004-0427
-
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.Assigned by: nvd@nist.gov (Primary)
References for CVE-2004-0427
-
http://marc.info/?l=linux-kernel&m=108139073506983&w=2
'[PATCH]: 2.4/2.6 do_fork() error path memory leak' - MARCMailing List;Third Party Advisory
-
http://secunia.com/advisories/11891
About Secunia Research | FlexeraBroken Link
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297
404 Not FoundBroken Link
-
http://www.ciac.org/ciac/bulletins/o-164.shtml
Broken Link
-
http://www.redhat.com/support/errata/RHSA-2004-260.html
SupportBroken Link
-
ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
Broken Link;Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/10221
Broken Link;Third Party Advisory;VDB Entry
-
http://secunia.com/advisories/11541
About Secunia Research | FlexeraBroken Link
-
http://www.redhat.com/support/errata/RHSA-2004-255.html
SupportBroken Link
-
http://fedoranews.org/updates/FEDORA-2004-111.shtml
FedoraNEWS.ORGThird Party Advisory
-
http://www.turbolinux.com/security/2004/TLSA-2004-14.txt
404 Not FoundBroken Link
-
http://www.debian.org/security/2006/dsa-1069
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilitiesBroken Link
-
http://secunia.com/advisories/11486
About Secunia Research | FlexeraBroken Link
-
http://secunia.com/advisories/11861
About Secunia Research | FlexeraBroken Link
-
http://www.novell.com/linux/security/advisories/2004_10_kernel.html
404 Page Not Found | SUSEBroken Link
-
http://secunia.com/advisories/11429
About Secunia Research | FlexeraBroken Link
-
http://secunia.com/advisories/11892
About Secunia Research | FlexeraBroken Link
-
http://linux.bkbits.net:8080/linux-2.4/cset@407bf20eDeeejm8t36_tpvSE-8EFHA
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/16002
Linux kernel do_fork memory leak CVE-2004-0427 Vulnerability ReportThird Party Advisory;VDB Entry
-
http://linux.bkbits.net:8080/linux-2.6/cset@407b1217x4jtqEkpFW2g_-RcF0726A
-
http://secunia.com/advisories/20202
About Secunia Research | FlexeraBroken Link
-
http://www.redhat.com/support/errata/RHSA-2004-327.html
SupportBroken Link
-
http://www.debian.org/security/2006/dsa-1082
[SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilitiesBroken Link
-
http://secunia.com/advisories/20163
About Secunia Research | FlexeraBroken Link
-
http://security.gentoo.org/glsa/glsa-200407-02.xml
Linux Kernel: Multiple vulnerabilities (GLSA 200407-02) — Gentoo securityBroken Link
-
http://www.mandriva.com/security/advisories?name=MDKSA-2004:037
Advisories - Mandriva LinuxThird Party Advisory
-
http://secunia.com/advisories/20162
About Secunia Research | FlexeraBroken Link
-
http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA
Broken Link
-
http://secunia.com/advisories/11464
About Secunia Research | FlexeraBroken Link
-
http://www.debian.org/security/2006/dsa-1070
[SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilitiesBroken Link
-
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
CONECTIVA | Análises dos Melhores Produtos Online (#10 Melhores)Broken Link
-
ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc
Broken Link;Patch;Vendor Advisory
-
http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A
Broken Link
-
http://secunia.com/advisories/20338
About Secunia Research | FlexeraThird Party Advisory
-
http://www.debian.org/security/2006/dsa-1067
[SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilitiesBroken Link
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819
404 Not FoundBroken Link
Jump to