NVD

Id
70871  
Name
CVE-2004-0424  
Description
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-07-07  
Modified Date
2017-07-10  
Seq
2004-0424  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365663 70871 CVE-2004-0424 20040504-01-U  View
365664 70871 CVE-2004-0424 CLA-2004:852  View
365665 70871 CVE-2004-0424 20040420 Linux kernel setsockopt MCAST_MSFILTER integer overflow  View
365666 70871 CVE-2004-0424 oval:org.mitre.oval:def:11214  View
365667 70871 CVE-2004-0424 oval:org.mitre.oval:def:939  View
365668 70871 CVE-2004-0424 http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt  View
365669 70871 CVE-2004-0424 ESA-20040428-004  View
365670 70871 CVE-2004-0424 MDKSA-2004:037  View
365671 70871 CVE-2004-0424 SuSE-SA:2004:010  View
365672 70871 CVE-2004-0424 RHSA-2004:183  View
365673 70871 CVE-2004-0424 10179  View
365674 70871 CVE-2004-0424 SSA:2004-119  View
365675 70871 CVE-2004-0424 linux-ipsetsockopt-integer-bo(15907)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62766 JVNDB-2004-000107 Linux Kernel の setsock() 関数におけるカーネルメモリが読み出し可能な脆弱性 Linux Kernel の setsockopt() 関数には、IPv4 マルチキャストパケットにおけるソース側のフィルタを設定する際にフィルタサイズを適切に扱わない不備のため、getsockopt() 関数と組みあわせる事でカーネルメモリが読み出し可能な脆弱性が存在します。 CVE-2004-0424 8851 CVE-2004-0424 70871 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000107.html 2004-03-30 2007-04-01 View