Every CVESearch/Get API key

CVE-2004-0109

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x,...

4.6 Medium

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Exploit likelihood

0.56%Down 3.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.6

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
CVE-2004-0109
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
CVE-2004-0109
Updated
2026-11-02
EUVDEUVD-2004-0109No score

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
EUVD-2004-0109
Updated
2026-11-03
GitHub AdvisoriesGHSA-q392-5rj3-249fNo score

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x,...

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
GHSA-q392-5rj3-249f
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-source-2.4.18
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.18-14.3
2.4.18-14.3
kernel-image-2.4.18-1-alpha
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.18-15
2.4.18-15
kernel-image-2.4.18-1-i386
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.18-13
2.4.18-13
kernel-image-2.4.18-i386bf
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.18-5woody8, plus listed versions
2.4.18-5
2.4.18-5woody8
kernel-patch-2.4.18-powerpc
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.18-1woody5
2.4.18-1woody5
kernel-image-2.4.17-hppa
Debian:3.0
From an advisory covering 5 CVEs
before 32.4
32.4
kernel-image-2.4.18-hppa
Debian:3.0
From an advisory covering 5 CVEs
before 62.3
62.3
kernel-image-2.4.17-ia64
Debian:3.0
From an advisory covering 5 CVEs
before 011226.17
011226.17
kernel-source-2.4.17
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.17-1woody3
2.4.17-1woody3
kernel-patch-2.4.17-apus
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.17-5
2.4.17-5
Show 51 moreShow less
Affected packages
PackageAffectedFixed
kernel-patch-2.4.17-s390
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.17-2.woody.4, plus listed versions
0.0.20020816-0.woody.30.0.20020816-0.woody.4
2.4.17-2.woody.4
kernel-image-2.4.17-s390
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.17-2.woody.4
2.4.17-2.woody.4
kernel-patch-2.4.17-mips
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.17-0.020226.2.woody6
2.4.17-0.020226.2.woody6
kernel-patch-2.4.17-mipsel
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.17-0.020226.2.woody6
2.4.17-0.020226.2.woody6
kernel-source-2.4.19
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.19-4.woody2
2.4.19-4.woody2
kernel-patch-2.4.19-mips
Debian:3.0
From an advisory covering 5 CVEs
before 2.4.19-0.020911.1.woody4
2.4.19-0.020911.1.woody4
kernel-source-2.4.16
Debian:3.0
From an advisory covering 6 CVEs
before 2.4.16-1woody2
2.4.16-1woody2
kernel-patch-2.4.16-arm
Debian:3.0
From an advisory covering 6 CVEs
before 20040419
20040419
kernel-image-2.4.16-lart
Debian:3.0
From an advisory covering 6 CVEs
before 20040419
20040419
kernel-image-2.4.16-netwinder
Debian:3.0
From an advisory covering 6 CVEs
before 20040419
20040419
kernel-image-2.4.16-riscpc
Debian:3.0
From an advisory covering 6 CVEs
before 20040419
20040419
kernel
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0109 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published April 14, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. No source names a fixed version.

References

Show 50 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open