CVE-2004-1074
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local...
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
Exploit likelihood
What each source reports
NVD Score used
2.1
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
- Record
CVE-2004-1074- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
- Record
CVE-2004-1074- Updated
- 2026-11-02
EUVDEUVD-2004-1072 No score
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
- Record
EUVD-2004-1072- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wm44-q972-xgpp No score
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local...
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
- Record
GHSA-wm44-q972-xgpp- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.16Debian:3.0 From an advisory covering 30 CVEs |
before 2.4.16-1woody2 | 2.4.16-1woody2 |
kernel-source-2.4.18Debian:3.0 From an advisory covering 29 CVEs |
before 2.4.18-14.4, plus listed versions 2.4.18-14.3 |
2.4.18-14.4 |
kernel-image-sparc-2.4Debian:3.0 From an advisory covering 30 CVEs |
before 26woody1, plus listed versions 26 |
26woody1 |
kernel-patch-2.4.19-mipsDebian:3.0 From an advisory covering 30 CVEs |
before 2.4.19-0.020911.1.woody5, plus listed versions 2.4.19-0.020911.1.woody4 |
2.4.19-0.020911.1.woody5 |
kernel-source-2.4.19Debian:3.0 From an advisory covering 30 CVEs |
before 2.4.19-4.woody3, plus listed versions 2.4.19-4.woody2 |
2.4.19-4.woody3 |
kernel-source-2.4.17Debian:3.0 From an advisory covering 30 CVEs |
before 2.4.17-1woody4, plus listed versions 2.4.17-1woody3 |
2.4.17-1woody4 |
kernelRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-hugememRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernelRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernelRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernelRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-docRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smpRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.4.21-27.0.2.EL | 0:2.4.21-27.0.2.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.4.x/2.6.x - Local Denial of Service / Memory Disclosure | 2004-11-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1074 is a low vulnerability (CVSS 2.1) in kernel, published December 1, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.01%, the 63rd percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=110322596918807&w=2
secunia.com/advisories/20163
debian.org/security/2006/dsa-1082
mandriva.com/security/advisories?name=MDKSA-2005:022
exchange.xforce.ibmcloud.com/vulnerabilities/18290
marc.info?l=linux-kernel&m=110021173607372&w=2
Show 46 moreShow less
bugzilla.fedora.us/show_bug.cgi?id=2336
debian.org/security/2006/dsa-1070
secunia.com/advisories/20162
trustix.org/errata/2005/0001
securityfocus.com/bid/11754
debian.org/security/2006/dsa-1067
debian.org/security/2006/dsa-1069
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9751
distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930
secunia.com/advisories/20202
secunia.com/advisories/20338
nvd.nist.gov/vuln/detail/CVE-2004-1074
github.com/advisories/GHSA-wm44-q972-xgpp
access.redhat.com/errata/RHSA-2005:043
access.redhat.com/security/updates/classification
marc.theaimsgroup.com?m=109503896031720
isec.pl/vulnerabilities/isec-0021-uselib.txt
isec.pl/vulnerabilities/isec-0022-pagefault.txt
bugzilla.redhat.com/show_bug.cgi?id=132245
bugzilla.redhat.com/show_bug.cgi?id=141996
bugzilla.redhat.com/show_bug.cgi?id=142091
bugzilla.redhat.com/show_bug.cgi?id=143866
bugzilla.redhat.com/show_bug.cgi?id=144048
bugzilla.redhat.com/show_bug.cgi?id=144134
bugzilla.redhat.com/show_bug.cgi?id=142442
bugzilla.redhat.com/show_bug.cgi?id=144784
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_043.json
access.redhat.com/security/cve/CVE-2004-0791
bugzilla.redhat.com/show_bug.cgi?id=1617291
cve.org/CVERecord?id=CVE-2004-0791
nvd.nist.gov/vuln/detail/CVE-2004-0791
access.redhat.com/security/cve/CVE-2004-1074
bugzilla.redhat.com/show_bug.cgi?id=1617367
cve.org/CVERecord?id=CVE-2004-1074
access.redhat.com/security/cve/CVE-2004-1235
bugzilla.redhat.com/show_bug.cgi?id=1617397
cve.org/CVERecord?id=CVE-2004-1235
nvd.nist.gov/vuln/detail/CVE-2004-1235
access.redhat.com/security/cve/CVE-2004-1237
bugzilla.redhat.com/show_bug.cgi?id=1617399
cve.org/CVERecord?id=CVE-2004-1237
nvd.nist.gov/vuln/detail/CVE-2004-1237
access.redhat.com/security/cve/CVE-2005-0003
bugzilla.redhat.com/show_bug.cgi?id=1617430
cve.org/CVERecord?id=CVE-2005-0003
nvd.nist.gov/vuln/detail/CVE-2005-0003