Vulnerability in Conectiva Linux
CVE-2004-0626
The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.
EPSS: 0.028 (84.8th percentile) — read the EPSS interpretation.
Affected products
- Conectiva Linux — versions 10
- Gentoo Linux
- Linux Linux_kernel — versions 2.6.0
- Suse Suse_linux — versions 8.0, 8.1, 8.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_CONECTIVA, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)