AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2004-0177

MEDIUM · CVSS 5 EPSS 2.60%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-06-01 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. It affects Linux.

CVE
CVE-2004-0177
Severity
MEDIUM
CVSS
5
EPSS
2.60%
Linux

Original NVD Description

The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.