What’s Vulnerable › Vulnerabilities

CVE-2004-0114

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-03-03 · updated 2026-06-16

Description

The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local users to gain read or write access to a portion of kernel memory and gain privileges.

Affected products

• FreeBSD: through 5.2
• Netbsd: through 1.3
• OpenBSD: through 2.6

References

• http://marc.info/?l=bugtraq&m=107608375207601&w=2
• http://www.openbsd.org/errata33.html#sysvshm
• http://www.osvdb.org/3836
• http://www.pine.nl/press/pine-cert-20040201.txt
• http://www.securityfocus.com/bid/9586
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15061
• http://marc.info/?l=bugtraq&m=107608375207601&w=2
• http://www.openbsd.org/errata33.html#sysvshm

Get alerted when CVE-2004-0114 or the next vulnerability affects your stack