CVE-2004-0177
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks...
5.0 MediumFix available
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
Exploit likelihood
2.60%Down 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
CVE-2004-0177- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
CVE-2004-0177- Updated
- 2026-11-02
EUVDEUVD-2004-0177 No score
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
EUVD-2004-0177- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qcgh-9mjq-vq4m No score
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks...
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
GHSA-qcgh-9mjq-vq4m- Updated
- 2026-11-02
OSVBELL-CVE-2004-0177
CVE-2004-0177 does not affect BellSoft software
- Record
BELL-CVE-2004-0177- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-14.3 | 2.4.18-14.3 |
kernel-image-2.4.18-1-alphaDebian:3.0 |
before 2.4.18-15 | 2.4.18-15 |
kernel-image-2.4.18-1-i386Debian:3.0 |
before 2.4.18-13 | 2.4.18-13 |
kernel-image-2.4.18-i386bfDebian:3.0 |
before 2.4.18-5woody8, plus listed versions 2.4.18-5 |
2.4.18-5woody8 |
kernel-patch-2.4.18-powerpcDebian:3.0 |
before 2.4.18-1woody5 | 2.4.18-1woody5 |
kernel-image-2.4.17-hppaDebian:3.0 |
before 32.4 | 32.4 |
kernel-image-2.4.18-hppaDebian:3.0 |
before 62.3 | 62.3 |
kernel-image-2.4.17-ia64Debian:3.0 |
before 011226.17 | 011226.17 |
kernel-source-2.4.17Debian:3.0 |
before 2.4.17-1woody3 | 2.4.17-1woody3 |
kernel-patch-2.4.17-apusDebian:3.0 |
before 2.4.17-5 | 2.4.17-5 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-patch-2.4.17-s390Debian:3.0 |
before 2.4.17-2.woody.4, plus listed versions 0.0.20020816-0.woody.30.0.20020816-0.woody.4 |
2.4.17-2.woody.4 |
kernel-image-2.4.17-s390Debian:3.0 |
before 2.4.17-2.woody.4 | 2.4.17-2.woody.4 |
kernel-patch-2.4.17-mipsDebian:3.0 |
before 2.4.17-0.020226.2.woody6 | 2.4.17-0.020226.2.woody6 |
kernel-patch-2.4.17-mipselDebian:3.0 |
before 2.4.17-0.020226.2.woody6 | 2.4.17-0.020226.2.woody6 |
kernel-source-2.4.19Debian:3.0 |
before 2.4.19-4.woody2 | 2.4.19-4.woody2 |
kernel-patch-2.4.19-mipsDebian:3.0 |
before 2.4.19-0.020911.1.woody4 | 2.4.19-0.020911.1.woody4 |
kernel-source-2.4.16Debian:3.0 |
before 2.4.16-1woody2 | 2.4.16-1woody2 |
kernel-patch-2.4.16-armDebian:3.0 |
before 20040419 | 20040419 |
kernel-image-2.4.16-lartDebian:3.0 |
before 20040419 | 20040419 |
kernel-image-2.4.16-netwinderDebian:3.0 |
before 20040419 | 20040419 |
kernel-image-2.4.16-riscpcDebian:3.0 |
before 20040419 | 20040419 |
kernelRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws |
before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0177 is a medium vulnerability (CVSS 5.0) in Linux Kernel, published April 14, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.60%, the 85th percentile. Fixed in kernel-source-2.4.18 2.4.18-14.3.
References
ciac.org/ciac/bulletins/o-127.shtml
marc.info?l=bugtraq&m=108213675028441&w=2
bugzilla.fedora.us/show_bug.cgi?id=2336
debian.org/security/2004/dsa-482
Show 99 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/15867
securityfocus.com/bid/10152
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000846
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10556
redhat.com/support/errata/RHSA-2005-293.html
linuxsecurity.com/advisories/engarde_advisory-4285.html
mandriva.com/security/advisories?name=MDKSA-2004:029
security.gentoo.org/glsa/glsa-200407-02.xml
rhn.redhat.com/errata/RHSA-2004-166.html
linux.bkbits.net/linux-2.4/cset%404056b368s6vpJbGWxDD_LhQNYQrdzQ
nvd.nist.gov/vuln/detail/CVE-2004-0177
github.com/advisories/GHSA-qcgh-9mjq-vq4m
docs.bell-sw.com/security/cves/CVE-2004-0177
access.redhat.com/errata/RHSA-2005:293
bugzilla.redhat.com/show_bug.cgi?id=121032
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_293.json
cve.org/CVERecord?id=CVE-2004-0075