Vulnerability Details : CVE-2004-1334

Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow.

Vulnerability category: OverflowDenial of service

Published 2004-12-15 05:00:00

Updated 2017-07-11 01:30:56

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2004-1334

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2004-1334

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	[email protected]
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2004-1334

http://www.securityfocus.com/bid/11956

Exploit;Patch;Vendor Advisory

CVEs referencing this url
http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html

Patch;Vendor Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=110383108211524&w=2

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/18522
http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html

Patch;Vendor Advisory

CVEs referencing this url