CVE-2004-0642: debian debian_linux Double Free

EPSS trend

Probability

8.26%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.26% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

14 links

www.kb.cert.org/vuls/id/795632Third Party AdvisoryX Refsource CERT VNUS Government Resource
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860Vendor AdvisoryX Refsource CONECTIVABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10709VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
rhn.redhat.com/errata/RHSA-2004-350.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4936VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
www.trustix.net/errata/2004/0045/Vendor AdvisoryX Refsource TRUSTIXBroken Link
www.debian.org/security/2004/dsa-543Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory
www.us-cert.gov/cas/techalerts/TA04-247A.htmlThird Party AdvisoryX Refsource CERTBroken LinkUS Government Resource
www.gentoo.org/security/en/glsa/glsa-200409-09.xmlVendor AdvisoryX Refsource GENTOOMailing ListThird Party Advisory
marc.info?l=bugtraq&m=109508872524753&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory

Show all 14 references

web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txtX Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/11078VDB EntryX Refsource BIDBroken LinkThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/17157VDB EntryX Refsource XFThird Party Advisory
security-tracker.debian.org/tracker/CVE-2004-0642Advisory

Related vulnerabilities

CVE-2018-19200debianuriparser+32.48%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2003-0060debiankrb5+15.56%23y ago01-02-2003 05:00Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.CVE-2003-0385debianxaos+10.86%23y ago10-06-2003 04:00Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.CVE-2003-0059debiankrb5+13.55%22y ago01-09-2004 04:00Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.

All vulnerabilities indebian_linux kerberos_5 enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation

CVE-2004-0642: debian debian_linux Double Free

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References