CVE-2004-0415 — security flaw

LOW

security flaw

Published Aug 5, 2004

2.1

LOW

CVSS 2.0

EPSS 0.77%

Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.

Red Hat Enterprise Linux 3

kernel-0:2.4.21-15.0.4.EL

Fixed · RHSA-2004:413
Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2004:327
Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2004:418
Red Hat Enterprise Linux ES version 2.1

n/a

Fixed · RHSA-2004:418
Red Hat Enterprise Linux WS version 2.1

n/a

Fixed · RHSA-2004:418
Red Hat Linux Advanced Workstation 2.1

n/a

Fixed · RHSA-2004:327

Product	Package	State	Advisory
Red Hat Enterprise Linux 3	kernel-0:2.4.21-15.0.4.EL	Fixed	RHSA-2004:413
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2004:327
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2004:418
Red Hat Enterprise Linux ES version 2.1	n/a	Fixed	RHSA-2004:418
Red Hat Enterprise Linux WS version 2.1	n/a	Fixed	RHSA-2004:418
Red Hat Linux Advanced Workstation 2.1	n/a	Fixed	RHSA-2004:327

No remediation recorded yet.

0.77% 0.00766

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00766

2022–2026

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.77% (0.00766)	53.84th	v5 (v2026.06.15)
Jun 15, 2026	0.77% (0.00766)	50.51th	v5 (v2026.06.15)
Mar 17, 2025	0.18% (0.00179)	37.20th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	0.34th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	0.50th	v3 (v2023.03.01)
Mar 6, 2023	2.05% (0.02046)	79.42th	v2 (v2022.01.01)
Apr 1, 2022	2.05% (0.02046)	77.59th	v2 (v2022.01.01)
Feb 4, 2022	2.05% (0.02046)	56.47th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc		vendor-advisoryx_refsource_SGI
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879		vendor-advisoryx_refsource_CONECTIVA
http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml		vendor-advisoryx_refsource_GENTOO
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087		vendor-advisoryx_refsource_MANDRAKE
http://www.redhat.com/support/errata/RHSA-2004-413.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2004-418.html		vendor-advisoryx_refsource_REDHATPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2004-0415		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1617198		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/16877		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2004-0415
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965		vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2004-0415