CVE-2004-0394
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not...
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
Exploit likelihood
What each source reports
NVD Score used
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
- Record
CVE-2004-0394- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
- Record
CVE-2004-0394- Updated
- 2026-11-02
EUVDEUVD-2004-0394 No score
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
- Record
EUVD-2004-0394- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-73x7-w549-42qm No score
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not...
A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.
- Record
GHSA-73x7-w549-42qm- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.16Debian:3.0 |
before 2.4.16-1woody2 | 2.4.16-1woody2 |
kernel-source-2.4.18Debian:3.0 |
before 2.4.18-14.4, plus listed versions 2.4.18-14.3 |
2.4.18-14.4 |
kernel-image-sparc-2.4Debian:3.0 |
before 26woody1, plus listed versions 26 |
26woody1 |
kernel-patch-2.4.19-mipsDebian:3.0 |
before 2.4.19-0.020911.1.woody5, plus listed versions 2.4.19-0.020911.1.woody4 |
2.4.19-0.020911.1.woody5 |
kernel-source-2.4.19Debian:3.0 |
before 2.4.19-4.woody3, plus listed versions 2.4.19-4.woody2 |
2.4.19-4.woody3 |
kernel-source-2.4.17Debian:3.0 |
before 2.4.17-1woody4, plus listed versions 2.4.17-1woody3 |
2.4.17-1woody4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0394 is a low vulnerability (CVSS 2.1) in Linux Kernel, published May 5, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in kernel-source-2.4.16 2.4.16-1woody2.
References
secunia.com/advisories/20163
debian.org/security/2006/dsa-1082
securityfocus.com/bid/10233
novell.com/linux/security/advisories/2004_10_kernel.html
Show 12 moreShow less
mandriva.com/security/advisories?name=MDKSA-2004:037
exchange.xforce.ibmcloud.com/vulnerabilities/15953
lwn.net/Articles/81773
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000846
linuxsecurity.com/advisories/engarde_advisory-4285.html
security.gentoo.org/glsa/glsa-200407-02.xml
nvd.nist.gov/vuln/detail/CVE-2004-0394
github.com/advisories/GHSA-73x7-w549-42qm