CVE-2004-0435

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-08-18 · updated 2026-06-16

Description

Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.

Affected products

FreeBSD: 4.0-releng, 4.8, 4.8-pre-release, 4.8-release_p6, 4.8-releng, 4.9 (+8)

References

http://secunia.com/advisories/11714
http://www.securityfocus.com/bid/10416
https://exchange.xforce.ibmcloud.com/vulnerabilities/16254
http://secunia.com/advisories/11714
http://www.securityfocus.com/bid/10416
https://exchange.xforce.ibmcloud.com/vulnerabilities/16254

Get alerted when CVE-2004-0435 or the next vulnerability affects your stack