What’s Vulnerable › Vulnerabilities

CVE-2004-0394

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-08-18 · updated 2026-06-16

Description

A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.

Affected products

• Linux kernel: 2.6.20.1

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
• http://lwn.net/Articles/81773/
• http://secunia.com/advisories/20162
• http://secunia.com/advisories/20163
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338
• http://security.gentoo.org/glsa/glsa-200407-02.xml
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070

Get alerted when CVE-2004-0394 or the next vulnerability affects your stack