ID:10263 - Exploit for Missing release of memory after effective lifetime in Linux kernel - CVE-2004-1335

 
Main Vulnerability Database Exploits ID:10263 - Exploit for Missing release of memory after effective lifetime in Linux kernel - CVE-2004-1335

ID:10263 - Exploit for Missing release of memory after effective lifetime in Linux kernel - CVE-2004-1335

Published: July 26, 2024


Vulnerability identifier: #VU94781
Vulnerability risk: Low
CVE-ID: CVE-2004-1335
CWE-ID: CWE-401
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to perform service disruption.

Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.


Remediation

Install update from vendor's repository.