CVE-2004-0554: avaya converged_communications_server

Modified

Published 15-06-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0554 is a low (CVSS 2.1) vulnerability in avaya converged_communications_server. EPSS estimates a 0.87% chance of exploitation in the next 30 days, higher than 58.7% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 2.1, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

2.1/10

010

Low · v2.0 (NVD)

EPSS score

0.87%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 5

DSA-1067-1 DSA-1069-1 DSA-1070-1 DSA-1082-1 RHSA-2004:255

Timeline

15-06-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.

CVSS metrics

1 score · 1 source · 1 version

v2.02.1

EPSS trend

Probability

0.87%

Chance of exploitation in the next 30 days

Percentile

59%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.87% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedoslinuxVerified
Linux Kernel 2.4.x/2.6.x - Assembler Inline Function Local Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Avaya5 products

converged_communications_server2.0
modular_messaging_message_storage_servers3400
s8300r2.0.0 | r2.0.1
s8500r2.0.0 | r2.0.1
s8700r2.0.0 | r2.0.1

Suse2 products

suse_email_server3.1 | iii
suse_linux7 | 8 | 8.0 | 8.1 | 8.2 | 9.0 | 9.1

Conectiva1 product

linux8.0 | 9.0

Gentoo1 product

linux1.4

Linux1 product

linux_kernel2.4.18 | 2.4.19 | 2.4.21 | 2.4.22 | 2.4.23 | 2.4.24 | 2.4.25 | 2.4.26 | 2.6.0 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.6:rc1 | 2.6.7 | 2.6.7:rc1

Redhat1 product