CVE-2004-0685

security flaw

Published Oct 26, 2004 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1067-1 New Linux kernel 2.4.16 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1069-1 New Linux kernel 2.4.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1070-1 New Linux kernel 2.4.19 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1082-1 New Linux kernel 2.4.17 packages fix several vulnerabilities
EUVD EUVD EUVD-2004-0684 Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 12:24 AM
Reserved
Jul 13, 2004, 12:00 AM
Status
Modified
Published
Dec 23, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:06 PM
Severity
Public date
Oct 23, 2003, 12:00 AM