CVE-2004-2395

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.

Ссылки

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:045
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10370
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16180
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:045
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10370
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16180

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*

cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*

EPSS

Процентиль: 20%

0.00065

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2395

debian

почти 21 год назад

Memory leak in passwd 0.68 allows local users to cause a denial of ser ...

GHSA-8h63-79mj-3p3q

github

больше 3 лет назад