NVD

Id
71527  
Name
CVE-2004-1137  
Description
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1137  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369966 71527 CVE-2004-1137 CLA-2005:930  View
369967 71527 CVE-2004-1137 http://isec.pl/vulnerabilities/isec-0018-igmp.txt  View
369968 71527 CVE-2004-1137 20041214 [USN-38-1] Linux kernel vulnerabilities  View
369969 71527 CVE-2004-1137 oval:org.mitre.oval:def:11144  View
369970 71527 CVE-2004-1137 MDKSA-2005:022  View
369971 71527 CVE-2004-1137 SUSE-SA:2004:044  View
369972 71527 CVE-2004-1137 RHSA-2005:092  View
369973 71527 CVE-2004-1137 linux-ipmcsource-code-execution(18481)  View
369974 71527 CVE-2004-1137 linux-igmpmarksources-dos(18482)  View
369975 71527 CVE-2004-1137 FLSA:2336  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63148 JVNDB-2004-000490 Linux Kernel に実装される IGMP の関数における複数の脆弱性 Linux Kernel に実装される IGMP/IP ネットワーキング・モジュールには、(1) ip_mc_source() 関数におけるカウンタ処理の不備、あるいは (2) igmp_marksources() 関数におけるパラメータを適切にチェックしない不備が存在し、カーネルメモリが上書きされる、あるいはカーネルクラッシュが発生する脆弱性が存在します。 CVE-2004-1137 9564 CVE-2004-1137 71527 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000490.html 2004-11-14 2007-04-01 View