Lucene search
HistoryDec 23, 2004 - 5:00 a.m.
CVE-2004-0685
linux
2.4 kernel
usb drivers
copy_to_user function
sensitive information
memory vulnerability
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
5.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.3%
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
Affected configurations
Node
linuxlinux_kernelMatch2.2.0
ORlinuxlinux_kernelMatch2.2.1
ORlinuxlinux_kernelMatch2.2.2
ORlinuxlinux_kernelMatch2.2.3
ORlinuxlinux_kernelMatch2.2.4
ORlinuxlinux_kernelMatch2.2.5
ORlinuxlinux_kernelMatch2.2.6
ORlinuxlinux_kernelMatch2.2.7
ORlinuxlinux_kernelMatch2.2.8
ORlinuxlinux_kernelMatch2.2.9
ORlinuxlinux_kernelMatch2.2.10
ORlinuxlinux_kernelMatch2.2.11
ORlinuxlinux_kernelMatch2.2.12
ORlinuxlinux_kernelMatch2.2.13
ORlinuxlinux_kernelMatch2.2.14
ORlinuxlinux_kernelMatch2.2.15
ORlinuxlinux_kernelMatch2.2.15pre16
ORlinuxlinux_kernelMatch2.2.15_pre20
ORlinuxlinux_kernelMatch2.2.16
ORlinuxlinux_kernelMatch2.2.16pre6
ORlinuxlinux_kernelMatch2.2.17
ORlinuxlinux_kernelMatch2.2.18
ORlinuxlinux_kernelMatch2.2.19
ORlinuxlinux_kernelMatch2.2.20
ORlinuxlinux_kernelMatch2.2.21
ORlinuxlinux_kernelMatch2.2.22
ORlinuxlinux_kernelMatch2.2.23
ORlinuxlinux_kernelMatch2.2.24
ORlinuxlinux_kernelMatch2.2.25
ORlinuxlinux_kernelMatch2.3.0
ORlinuxlinux_kernelMatch2.3.99
ORlinuxlinux_kernelMatch2.3.99pre1
ORlinuxlinux_kernelMatch2.3.99pre2
ORlinuxlinux_kernelMatch2.3.99pre3
ORlinuxlinux_kernelMatch2.3.99pre4
ORlinuxlinux_kernelMatch2.3.99pre5
ORlinuxlinux_kernelMatch2.3.99pre6
ORlinuxlinux_kernelMatch2.3.99pre7
ORlinuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.0test1
ORlinuxlinux_kernelMatch2.4.0test10
ORlinuxlinux_kernelMatch2.4.0test11
ORlinuxlinux_kernelMatch2.4.0test12
ORlinuxlinux_kernelMatch2.4.0test2
ORlinuxlinux_kernelMatch2.4.0test3
ORlinuxlinux_kernelMatch2.4.0test4
ORlinuxlinux_kernelMatch2.4.0test5
ORlinuxlinux_kernelMatch2.4.0test6
ORlinuxlinux_kernelMatch2.4.0test7
ORlinuxlinux_kernelMatch2.4.0test8
ORlinuxlinux_kernelMatch2.4.0test9
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.2
ORlinuxlinux_kernelMatch2.4.3
ORlinuxlinux_kernelMatch2.4.4
ORlinuxlinux_kernelMatch2.4.5
ORlinuxlinux_kernelMatch2.4.6
ORlinuxlinux_kernelMatch2.4.7
ORlinuxlinux_kernelMatch2.4.8
ORlinuxlinux_kernelMatch2.4.9
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
ORlinuxlinux_kernelMatch2.4.18x86
ORlinuxlinux_kernelMatch2.4.18pre1
ORlinuxlinux_kernelMatch2.4.18pre2
ORlinuxlinux_kernelMatch2.4.18pre3
ORlinuxlinux_kernelMatch2.4.18pre4
ORlinuxlinux_kernelMatch2.4.18pre5
ORlinuxlinux_kernelMatch2.4.18pre6
ORlinuxlinux_kernelMatch2.4.18pre7
ORlinuxlinux_kernelMatch2.4.18pre8
ORlinuxlinux_kernelMatch2.4.19
ORlinuxlinux_kernelMatch2.4.19pre1
ORlinuxlinux_kernelMatch2.4.19pre2
ORlinuxlinux_kernelMatch2.4.19pre3
ORlinuxlinux_kernelMatch2.4.19pre4
ORlinuxlinux_kernelMatch2.4.19pre5
ORlinuxlinux_kernelMatch2.4.19pre6
ORlinuxlinux_kernelMatch2.4.20
ORlinuxlinux_kernelMatch2.4.21
ORlinuxlinux_kernelMatch2.4.21pre1
ORlinuxlinux_kernelMatch2.4.21pre4
ORlinuxlinux_kernelMatch2.4.21pre7
ORlinuxlinux_kernelMatch2.4.22
ORlinuxlinux_kernelMatch2.4.23
ORlinuxlinux_kernelMatch2.4.23pre9
ORlinuxlinux_kernelMatch2.4.23_ow2
ORlinuxlinux_kernelMatch2.4.24
ORlinuxlinux_kernelMatch2.4.24_ow1
ORlinuxlinux_kernelMatch2.4.25
ORlinuxlinux_kernelMatch2.4.26
ORlinuxlinux_kernelMatch2.4.27pre1
ORlinuxlinux_kernelMatch2.4.27pre2
ORlinuxlinux_kernelMatch2.4.27pre3
ORlinuxlinux_kernelMatch2.4.27pre4
ORlinuxlinux_kernelMatch2.4.27pre5
ORlinuxlinux_kernelMatch2.5.0
ORlinuxlinux_kernelMatch2.5.1
ORlinuxlinux_kernelMatch2.5.2
ORlinuxlinux_kernelMatch2.5.3
ORlinuxlinux_kernelMatch2.5.4
ORlinuxlinux_kernelMatch2.5.5
ORlinuxlinux_kernelMatch2.5.6
ORlinuxlinux_kernelMatch2.5.7
ORlinuxlinux_kernelMatch2.5.8
ORlinuxlinux_kernelMatch2.5.9
ORlinuxlinux_kernelMatch2.5.10
ORlinuxlinux_kernelMatch2.5.11
ORlinuxlinux_kernelMatch2.5.12
ORlinuxlinux_kernelMatch2.5.13
ORlinuxlinux_kernelMatch2.5.14
ORlinuxlinux_kernelMatch2.5.15
ORlinuxlinux_kernelMatch2.5.16
ORlinuxlinux_kernelMatch2.5.17
ORlinuxlinux_kernelMatch2.5.18
ORlinuxlinux_kernelMatch2.5.19
ORlinuxlinux_kernelMatch2.5.20
ORlinuxlinux_kernelMatch2.5.21
ORlinuxlinux_kernelMatch2.5.22
ORlinuxlinux_kernelMatch2.5.23
ORlinuxlinux_kernelMatch2.5.24
ORlinuxlinux_kernelMatch2.5.25
ORlinuxlinux_kernelMatch2.5.26
ORlinuxlinux_kernelMatch2.5.27
ORlinuxlinux_kernelMatch2.5.28
ORlinuxlinux_kernelMatch2.5.29
ORlinuxlinux_kernelMatch2.5.30
ORlinuxlinux_kernelMatch2.5.31
ORlinuxlinux_kernelMatch2.5.32
ORlinuxlinux_kernelMatch2.5.33
ORlinuxlinux_kernelMatch2.5.34
ORlinuxlinux_kernelMatch2.5.35
ORlinuxlinux_kernelMatch2.5.36
ORlinuxlinux_kernelMatch2.5.37
ORlinuxlinux_kernelMatch2.5.38
ORlinuxlinux_kernelMatch2.5.39
ORlinuxlinux_kernelMatch2.5.40
ORlinuxlinux_kernelMatch2.5.41
ORlinuxlinux_kernelMatch2.5.42
ORlinuxlinux_kernelMatch2.5.43
ORlinuxlinux_kernelMatch2.5.44
ORlinuxlinux_kernelMatch2.5.45
ORlinuxlinux_kernelMatch2.5.46
ORlinuxlinux_kernelMatch2.5.47
ORlinuxlinux_kernelMatch2.5.48
ORlinuxlinux_kernelMatch2.5.49
ORlinuxlinux_kernelMatch2.5.50
ORlinuxlinux_kernelMatch2.5.51
ORlinuxlinux_kernelMatch2.5.52
ORlinuxlinux_kernelMatch2.5.53
ORlinuxlinux_kernelMatch2.5.54
ORlinuxlinux_kernelMatch2.5.55
ORlinuxlinux_kernelMatch2.5.56
ORlinuxlinux_kernelMatch2.5.57
ORlinuxlinux_kernelMatch2.5.58
ORlinuxlinux_kernelMatch2.5.59
ORlinuxlinux_kernelMatch2.5.60
ORlinuxlinux_kernelMatch2.5.61
ORlinuxlinux_kernelMatch2.5.62
ORlinuxlinux_kernelMatch2.5.63
ORlinuxlinux_kernelMatch2.5.64
ORlinuxlinux_kernelMatch2.5.65
ORlinuxlinux_kernelMatch2.5.66
ORlinuxlinux_kernelMatch2.5.67
ORlinuxlinux_kernelMatch2.5.68
ORlinuxlinux_kernelMatch2.5.69
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test10
ORlinuxlinux_kernelMatch2.6.0test11
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.6rc1
ORlinuxlinux_kernelMatch2.6.7
ORlinuxlinux_kernelMatch2.6.7rc1
ORlinuxlinux_kernelMatch2.6.8rc1
ORlinuxlinux_kernelMatch2.6.8rc2
ORlinuxlinux_kernelMatch2.6.8rc3
ORlinuxlinux_kernelMatch2.6_test9_cvs
ORredhatenterprise_linuxMatch3.0advanced_servers
ORredhatenterprise_linuxMatch3.0enterprise_server
ORredhatenterprise_linuxMatch3.0workstation
ORredhatenterprise_linux_desktopMatch3.0
ORtrustixsecure_linuxMatch2.0
ORtrustixsecure_linuxMatch2.1
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921
secunia.com/advisories/20162
secunia.com/advisories/20163
secunia.com/advisories/20202
secunia.com/advisories/20338
www.debian.org/security/2006/dsa-1067
www.debian.org/security/2006/dsa-1069
www.debian.org/security/2006/dsa-1070
www.debian.org/security/2006/dsa-1082
www.gentoo.org/security/en/glsa/glsa-200408-24.xml
www.kb.cert.org/vuls/id/981134
www.redhat.com/support/errata/RHSA-2004-504.html
www.redhat.com/support/errata/RHSA-2004-505.html
www.securityfocus.com/bid/10892
www.securityspace.com/smysecure/catid.html?id=14580
www.trustix.net/errata/2004/0041/
bugzilla.fedora.us/show_bug.cgi?id=2336
exchange.xforce.ibmcloud.com/vulnerabilities/16931
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10665
Related
nvd
nvd
CVE-2004-0685
2004-12-23 05:00:00
cvelist
cvelist
CVE-2004-0685
2004-10-26 04:00:00
ubuntucve
ubuntucve
CVE-2004-0685
2004-12-23 00:00:00
cert
cert
Linux kernel USB drivers do not initialize kernel memory properly
2004-10-22 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200408-24 (Kernel)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200408-24 (Kernel)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-1069-1)
2023-03-08 00:00:00
securityvulns
securityvulns
[ GLSA 200408-24 ] Linux Kernel: Multiple information leaks
2004-08-30 00:00:00
gentoo
gentoo
Linux Kernel: Multiple information leaks
2004-08-25 00:00:00
nessus
nessus
GLSA-200408-24 : Linux Kernel: Multiple information leaks
2004-08-30 00:00:00
RHEL 2.1 : kernel (RHSA-2004:505)
2004-12-14 00:00:00
RHEL 3 : kernel (RHSA-2004:549)
2004-12-13 00:00:00
redhat
redhat
(RHSA-2004:505) Updated kernel packages fix security vulnerability
2004-12-13 00:00:00
(RHSA-2004:549) kernel security update
2004-12-02 00:00:00
(RHSA-2004:504) Updated Itanium kernel packages resolve security issues
2004-12-13 00:00:00
debian
debian
osv
osv
kernel-source-2.4.19 - several vulnerabilities
2006-05-21 00:00:00
kernel-source-2.4.18 - several
2006-05-20 00:00:00
kernel-source-2.4.17 - several vulnerabilities
2006-05-29 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
5.3 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2004-0685