CVE-2004-0772: debian debian_linux Double Free

EPSS trend

Probability

6.99%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.99% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.99%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860Vendor AdvisoryX Refsource CONECTIVABroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/17158VDB EntryX Refsource XFThird Party Advisory
www.kb.cert.org/vuls/id/350792Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.trustix.net/errata/2004/0045/Vendor AdvisoryX Refsource TRUSTIXBroken Link
www.debian.org/security/2004/dsa-543Vendor AdvisoryX Refsource DEBIANMailing List
www.us-cert.gov/cas/techalerts/TA04-247A.htmlThird Party AdvisoryX Refsource CERTBroken LinkPatchUS Government Resource
www.gentoo.org/security/en/glsa/glsa-200409-09.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
marc.info?l=bugtraq&m=109508872524753&w=2Mailing ListX Refsource BUGTRAQ
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txtX Refsource CONFIRMPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2004:088Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory

Show all 13 references

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4661VDB EntrySignatureX Refsource OVALBroken Link
www.securityfocus.com/bid/11078VDB EntryX Refsource BIDBroken LinkThird Party Advisory
security-tracker.debian.org/tracker/CVE-2004-0772Advisory

Related vulnerabilities

CVE-2018-19200debianuriparser+32.48%7y ago12-11-2018 15:00An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2003-0060debiankrb5+15.56%23y ago01-02-2003 05:00Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.CVE-2003-0385debianxaos+10.86%23y ago10-06-2003 04:00Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.CVE-2003-0059debiankrb5+13.55%22y ago01-09-2004 04:00Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.

All vulnerabilities indebian_linux kerberos_5 openpkg

CVE-2004-0772: debian debian_linux Double Free

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References