CVE-2004-0077

The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.43% chance of exploitation in the next 30 days, 84th percentile

Published

2004-09-01

Updated

2024-08-08

Proof-of-concept exploits (1)

• 0b0111100/20040★ · 2026-09-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/160
• https://www.exploit-db.com/exploits/154

Exploit collections (1)

• CVE-2004-0077helloexp/0day

Security advisories

• http://security.gentoo.org/glsa/glsa-200403-02.xml
• http://www.debian.org/security/2004/dsa-439
• http://www.securityfocus.com/bid/9686
• http://www.kb.cert.org/vuls/id/981222
• http://www.redhat.com/support/errata/RHSA-2004-065.html
• http://www.redhat.com/support/errata/RHSA-2004-066.html
• http://www.redhat.com/support/errata/RHSA-2004-069.html
• http://www.redhat.com/support/errata/RHSA-2004-106.html

References

• CVE Record
• NVD entry

Related

• CVE-2004-1235
• CVE-2005-0736
• CVE-2005-1263
• CVE-2006-2451
• CVE-2006-3626
• CVE-2008-0600