CVE-2004-0424

Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.24% chance of exploitation in the next 30 days, 69th percentile

Published

2004-04-30

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/274

Security advisories

• http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt
• http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
• http://www.securityfocus.com/bid/10179
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:037
• http://www.redhat.com/support/errata/RHSA-2004-183.html

References

• CVE Record
• NVD entry