CVE-2004-0177

Linux Kernel < 2.4.26 - Information Disclosure via Ext3 Journal Descriptor Blocks

Title source: llm
STIX 2.1

Description

The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.

References (24)

Core 24
Core References
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/o-127.shtml
Mailing List vendor-advisory x_refsource_trustix
http://marc.info/?l=bugtraq&m=108213675028441&w=2
Issue Tracking vendor-advisory x_refsource_fedora
https://bugzilla.fedora.us/show_bug.cgi?id=2336
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-482
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-495
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-479
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15867
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-480
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10152
Vendor Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-489
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-481
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10556
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-293.html
Patch, Vendor Advisory vendor-advisory x_refsource_engarde
http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-505.html
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/o-121.shtml
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/o-126.shtml
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-504.html
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2004:029
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200407-02.xml
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2004-166.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-491

Scores

EPSS 0.0260
EPSS Percentile 84.0%

Details

Status published
Products (1)
linux/linux_kernel 2.4.0
Published Jun 01, 2004
Tracked Since Feb 18, 2026