Vulnerability in Linux Kernel
CVE-2004-1334
Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow.
EPSS: 0.005 (41.7th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel — versions 2.4.0, 2.4.1, 2.4.2
- Redhat Fedora_core — versions core_1.0, core_2.0, core_3.0
- Redhat Linux — versions 7.3, 9.0
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, URL Repurposed, Patch, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)