Every CVE Search/ Get API key

CVE-2004-0109

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x,...

4.6 MediumFix available

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Exploit likelihood

0.56%Down 3.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
CVE-2004-0109
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
CVE-2004-0109
Updated
2026-11-02
EUVDEUVD-2004-0109 No score

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
EUVD-2004-0109
Updated
2026-11-03
GitHub AdvisoriesGHSA-q392-5rj3-249f No score

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x,...

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

Record
GHSA-q392-5rj3-249f
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-source-2.4.18
Debian:3.0
 before 2.4.18-14.3
2.4.18-14.3
kernel-image-2.4.18-1-alpha
Debian:3.0
 before 2.4.18-15
2.4.18-15
kernel-image-2.4.18-1-i386
Debian:3.0
 before 2.4.18-13
2.4.18-13
kernel-image-2.4.18-i386bf
Debian:3.0
 before 2.4.18-5woody8, plus listed versions
2.4.18-5
2.4.18-5woody8
kernel-patch-2.4.18-powerpc
Debian:3.0
 before 2.4.18-1woody5
2.4.18-1woody5
kernel-image-2.4.17-hppa
Debian:3.0
 before 32.4
32.4
kernel-image-2.4.18-hppa
Debian:3.0
 before 62.3
62.3
kernel-image-2.4.17-ia64
Debian:3.0
 before 011226.17
011226.17
kernel-source-2.4.17
Debian:3.0
 before 2.4.17-1woody3
2.4.17-1woody3
kernel-patch-2.4.17-apus
Debian:3.0
 before 2.4.17-5
2.4.17-5
Show 51 moreShow less
Affected packages
PackageAffectedFixed
kernel-patch-2.4.17-s390
Debian:3.0
 before 2.4.17-2.woody.4, plus listed versions
0.0.20020816-0.woody.30.0.20020816-0.woody.4
2.4.17-2.woody.4
kernel-image-2.4.17-s390
Debian:3.0
 before 2.4.17-2.woody.4
2.4.17-2.woody.4
kernel-patch-2.4.17-mips
Debian:3.0
 before 2.4.17-0.020226.2.woody6
2.4.17-0.020226.2.woody6
kernel-patch-2.4.17-mipsel
Debian:3.0
 before 2.4.17-0.020226.2.woody6
2.4.17-0.020226.2.woody6
kernel-source-2.4.19
Debian:3.0
 before 2.4.19-4.woody2
2.4.19-4.woody2
kernel-patch-2.4.19-mips
Debian:3.0
 before 2.4.19-0.020911.1.woody4
2.4.19-0.020911.1.woody4
kernel-source-2.4.16
Debian:3.0
 before 2.4.16-1woody2
2.4.16-1woody2
kernel-patch-2.4.16-arm
Debian:3.0
 before 20040419
20040419
kernel-image-2.4.16-lart
Debian:3.0
 before 20040419
20040419
kernel-image-2.4.16-netwinder
Debian:3.0
 before 20040419
20040419
kernel-image-2.4.16-riscpc
Debian:3.0
 before 20040419
20040419
kernel
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::as
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::desktop
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::es
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-BOOT
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-doc
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-hugemem-unsupported
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-smp-unsupported
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-source
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL
kernel-unsupported
Red Hat:enterprise_linux:3::ws
 before 0:2.4.21-9.0.3.EL
0:2.4.21-9.0.3.EL

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0109 is a medium vulnerability (CVSS 4.6) in Linux Kernel, published April 14, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in kernel-source-2.4.18 2.4.18-14.3.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open