QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0427

Back to search

CVE-2004-0427

Published: Apr 30, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.

VendorProductVersions

n/a

n/a

affected
n/a

References

20163
third-party-advisory
x_refsource_SECUNIA
RHSA-2004:327
vendor-advisory
x_refsource_REDHAT
11464
third-party-advisory
x_refsource_SECUNIA
linux-dofork-memory-leak(16002)
vdb-entry
x_refsource_XF
DSA-1082
vendor-advisory
x_refsource_DEBIAN
RHSA-2004:255
vendor-advisory
x_refsource_REDHAT
FEDORA-2004-111
vendor-advisory
x_refsource_FEDORA
11861
third-party-advisory
x_refsource_SECUNIA
RHSA-2004:260
vendor-advisory
x_refsource_REDHAT
SuSE-SA:2004:010
vendor-advisory
x_refsource_SUSE
DSA-1070
vendor-advisory
x_refsource_DEBIAN
oval:org.mitre.oval:def:10297
vdb-entry
signature
x_refsource_OVAL
20162
third-party-advisory
x_refsource_SECUNIA
MDKSA-2004:037
vendor-advisory
x_refsource_MANDRAKE
11891
third-party-advisory
x_refsource_SECUNIA
11486
third-party-advisory
x_refsource_SECUNIA
TLSA-2004-14
vendor-advisory
x_refsource_TURBO
11541
third-party-advisory
x_refsource_SECUNIA
DSA-1067
vendor-advisory
x_refsource_DEBIAN
CLA-2004:846
vendor-advisory
x_refsource_CONECTIVA
10221
vdb-entry
x_refsource_BID
DSA-1069
vendor-advisory
x_refsource_DEBIAN
11429
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:2819
vdb-entry
signature
x_refsource_OVAL
O-164
third-party-advisory
government-resource
x_refsource_CIAC
20202
third-party-advisory
x_refsource_SECUNIA
GLSA-200407-02
vendor-advisory
x_refsource_GENTOO
11892
third-party-advisory
x_refsource_SECUNIA
20338
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now