Back to Database
Status published
High
CVE-2004-0424
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22...
Vulnerability Description
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0424
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586
- http://www.novell.com/linux/security/advisories/2004_10_kernel.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214
- http://www.redhat.com/support/errata/RHSA-2004-183.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15907
- ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc
- http://www.securityfocus.com/bid/10179
- http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
- http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852
- http://marc.info/?l=bugtraq&m=108253171301153&w=2
More from sgi
View All →CVE-2012-5530
The (1) pcmd and (2) pmlogger init scripts in Performance...
Low
2.1
CVE-2012-3421
The pduread function in pdu.c in libpcp in Performance Co-Pilot...
Medium
5
CVE-2012-3420
Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow...
Medium
5
CVE-2012-3419
Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc...
Medium
5
CVE-2012-3418
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers...
Medium
5
Affected Vendor
Affected Software
propack, linux kernel, slackware linux
Vulnerable Versions:
3.0, 2.4.22, 2.4.23, 2.4.23_ow2, 2.4.24, 2.4.24_ow1, 2.4.25, 2.6.1, 2.6.2, 2.6.3, 9.1, current
Timeline
Official Publish:
April 30th, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.