What’s Vulnerable › Vulnerabilities

CVE-2004-0554

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-08-06 · updated 2026-06-16

Description

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.

Affected products

• Avaya Converged Communications Server: 2.0
• Avaya Intuity Audix: all versions
• Avaya Modular Messaging Message Storage Server: s3400
• Avaya S8300: r2.0.0, r2.0.1
• Avaya S8500: r2.0.0, r2.0.1
• Avaya S8700: r2.0.0, r2.0.1
• Conectiva Linux: 8.0, 9.0
• gentoo Linux: 1.4
• Linux kernel: 2.4.18, 2.4.19, 2.4.21, 2.4.22, 2.4.23, 2.4.24 (+14)
• Red Hat Enterprise Linux: 2.1, 3.0
• Suse Email Server: 3.1, iii
• Suse Linux: 7, 8, 8.0, 8.1, 8.2, 9.0 (+1)
• Suse Linux Admin-Cd For Firewall: all versions
• Suse Linux Connectivity Server: all versions
• Suse Linux Database Server: all versions
• Suse Linux Firewall Cd: all versions
• Suse Linux Office Server: all versions
• Suse Office Server: all versions

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845
• http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905
• http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html
• http://lwn.net/Articles/91155/
• http://marc.info/?l=bugtraq&m=108786114032681&w=2
• http://marc.info/?l=bugtraq&m=108793699910896&w=2
• http://marc.info/?l=linux-kernel&m=108681568931323&w=2
• http://secunia.com/advisories/20162
• http://secunia.com/advisories/20163
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338
• http://security.gentoo.org/glsa/glsa-200407-02.xml

Get alerted when CVE-2004-0554 or the next vulnerability affects your stack