ID:10315 - Exploit for Integer overflow in Linux kernel - CVE-2004-0424

 
Main Vulnerability Database Exploits ID:10315 - Exploit for Integer overflow in Linux kernel - CVE-2004-0424

ID:10315 - Exploit for Integer overflow in Linux kernel - CVE-2004-0424

Published: August 7, 2024


Vulnerability identifier: #VU95482
Vulnerability risk: Low
CVE-ID: CVE-2004-0424
CWE-ID: CWE-190
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to execute arbitrary code.

Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.


Remediation

Install update from vendor's repository.