CVE-2004-0177
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks...
5.0 Medium
CVE-2004-0177 is a medium vulnerability (CVSS 5.0) in Linux Kernel, published April 14, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.60%, the 85th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.60%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
Exploit likelihood
2.60%Down 0.1 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 From an advisory covering 5 CVEs | before 2.4.18-14.3 | 2.4.18-14.3 |
kernel-image-2.4.18-1-alphaDebian:3.0 From an advisory covering 5 CVEs | before 2.4.18-15 | 2.4.18-15 |
kernel-image-2.4.18-1-i386Debian:3.0 From an advisory covering 5 CVEs | before 2.4.18-13 | 2.4.18-13 |
kernel-image-2.4.18-i386bfDebian:3.0 From an advisory covering 5 CVEs | before 2.4.18-5woody8, plus listed versions 2.4.18-5 | 2.4.18-5woody8 |
kernel-patch-2.4.18-powerpcDebian:3.0 From an advisory covering 5 CVEs | before 2.4.18-1woody5 | 2.4.18-1woody5 |
kernel-image-2.4.17-hppaDebian:3.0 From an advisory covering 5 CVEs | before 32.4 | 32.4 |
kernel-image-2.4.18-hppaDebian:3.0 From an advisory covering 5 CVEs | before 62.3 | 62.3 |
kernel-image-2.4.17-ia64Debian:3.0 From an advisory covering 5 CVEs | before 011226.17 | 011226.17 |
kernel-source-2.4.17Debian:3.0 From an advisory covering 5 CVEs | before 2.4.17-1woody3 | 2.4.17-1woody3 |
kernel-patch-2.4.17-apusDebian:3.0 From an advisory covering 5 CVEs | before 2.4.17-5 | 2.4.17-5 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-patch-2.4.17-s390Debian:3.0 From an advisory covering 5 CVEs | before 2.4.17-2.woody.4, plus listed versions 0.0.20020816-0.woody.30.0.20020816-0.woody.4 | 2.4.17-2.woody.4 |
kernel-image-2.4.17-s390Debian:3.0 From an advisory covering 5 CVEs | before 2.4.17-2.woody.4 | 2.4.17-2.woody.4 |
kernel-patch-2.4.17-mipsDebian:3.0 From an advisory covering 5 CVEs | before 2.4.17-0.020226.2.woody6 | 2.4.17-0.020226.2.woody6 |
kernel-patch-2.4.17-mipselDebian:3.0 From an advisory covering 5 CVEs | before 2.4.17-0.020226.2.woody6 | 2.4.17-0.020226.2.woody6 |
kernel-source-2.4.19Debian:3.0 From an advisory covering 5 CVEs | before 2.4.19-4.woody2 | 2.4.19-4.woody2 |
kernel-patch-2.4.19-mipsDebian:3.0 From an advisory covering 5 CVEs | before 2.4.19-0.020911.1.woody4 | 2.4.19-0.020911.1.woody4 |
kernel-source-2.4.16Debian:3.0 From an advisory covering 6 CVEs | before 2.4.16-1woody2 | 2.4.16-1woody2 |
kernel-patch-2.4.16-armDebian:3.0 From an advisory covering 6 CVEs | before 20040419 | 20040419 |
kernel-image-2.4.16-lartDebian:3.0 From an advisory covering 6 CVEs | before 20040419 | 20040419 |
kernel-image-2.4.16-netwinderDebian:3.0 From an advisory covering 6 CVEs | before 20040419 | 20040419 |
kernel-image-2.4.16-riscpcDebian:3.0 From an advisory covering 6 CVEs | before 20040419 | 20040419 |
kernelRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::as From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::desktop From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::es From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernelRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-BOOTRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-docRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugememRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-hugemem-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smpRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-smp-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-sourceRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
kernel-unsupportedRed Hat:enterprise_linux:3::ws From an advisory covering 14 CVEs | before 0:2.4.21-27.0.4.EL | 0:2.4.21-27.0.4.EL |
What each source reports
NVD Score used
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
CVE-2004-0177- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
CVE-2004-0177- Updated
- 2026-11-02
EUVDEUVD-2004-0177No score
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
EUVD-2004-0177- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qcgh-9mjq-vq4mNo score
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks...
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
- Record
GHSA-qcgh-9mjq-vq4m- Updated
- 2026-11-02
OSVBELL-CVE-2004-0177
CVE-2004-0177 does not affect BellSoft software
- Record
BELL-CVE-2004-0177- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
ciac.org/ciac/bulletins/o-127.shtml
marc.info?l=bugtraq&m=108213675028441&w=2
bugzilla.fedora.us/show_bug.cgi?id=2336
debian.org/security/2004/dsa-482
Show 99 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/15867
securityfocus.com/bid/10152
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000846
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10556
redhat.com/support/errata/RHSA-2005-293.html
linuxsecurity.com/advisories/engarde_advisory-4285.html
mandriva.com/security/advisories?name=MDKSA-2004:029
security.gentoo.org/glsa/glsa-200407-02.xml
rhn.redhat.com/errata/RHSA-2004-166.html
linux.bkbits.net/linux-2.4/cset%404056b368s6vpJbGWxDD_LhQNYQrdzQ
nvd.nist.gov/vuln/detail/CVE-2004-0177
github.com/advisories/GHSA-qcgh-9mjq-vq4m
docs.bell-sw.com/security/cves/CVE-2004-0177
access.redhat.com/errata/RHSA-2005:293
bugzilla.redhat.com/show_bug.cgi?id=121032
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_293.json
cve.org/CVERecord?id=CVE-2004-0075