CVE-2004-0416
NoneCVSS
—
EPSS
13.2%
Published
Aug 6, 2004
CISA due date
—
The record
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cvs | 0 | 1:1.12.9-1 |
| Debian:12 | cvs | 0 | 1:1.12.9-1 |
| Debian:13 | cvs | 0 | 1:1.12.9-1 |
| Debian:3.0 | cvs | 0 | 1.11.1p1debian-9woody7 |
| Red Hat:enterprise_linux:3::as | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::as | cvs-debuginfo | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::desktop | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::desktop | cvs-debuginfo | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::es | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::es | cvs-debuginfo | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::ws | cvs | 0 | 0:1.11.2-24 |
| Red Hat:enterprise_linux:3::ws | cvs-debuginfo | 0 | 0:1.11.2-24 |
Related vulnerabilities
- CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote… Also affects cvs
- CVE-2004-0396 Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when… Also affects cvs
- CVE-2003-0015 Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a… Also affects cvs
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119