CVE-2004-0554: Avaya Converged Communications Server

Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.

Affected products

• Avaya Converged Communications Server: version 2.0 only
• Avaya Intuity Audix: any version
• Avaya Modular Messaging Message Storage Server: version s3400 only
• Avaya s8300: version r2.0.0 only; version r2.0.1 only
• Avaya s8500: version r2.0.0 only; version r2.0.1 only
• Avaya s8700: version r2.0.0 only; version r2.0.1 only
• Conectiva Linux: version 8.0 only; version 9.0 only
• Gentoo Linux: version 1.4 only
• Linux Linux Kernel: version 2.4.18 only; version 2.4.19 only; version 2.4.21 only; version 2.4.22 only; version 2.4.23 only; version 2.4.24 only; …
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Suse Suse Email Server: version 3.1 only; version iii only
• Suse Suse Linux: version 7 only; version 8 only; version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; …
• Suse Suse Linux Admin-Cd For Firewall: any version
• Suse Suse Linux Connectivity Server: any version
• Suse Suse Linux Database Server: any version
• Suse Suse Linux Firewall Cd: any version
• Suse Suse Linux Office Server: any version
• Suse Suse Office Server: any version

Published 2004-08-06. Last modified 2026-06-16.