CVE-2004-0138

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.

Metrics

CVSS 2.0 4.9/10AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 31, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-013910.0Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind cCVE-2004-01435.0Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth CVE-2004-01487.2wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissiCVE-2004-01494.6Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.CVE-2004-01507.5Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arCVE-2004-01517.2Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.CVE-2004-01527.5Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode functionCVE-2004-01537.5Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain CVE-2004-01545.0rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory fCVE-2004-01557.5The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signatureCVE-2004-01565.0Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial oCVE-2004-01574.6x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute
CVE-2004-0138: Medium severity, CVSS 4.9 | Vulnix