CVE-2004-1334

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110383108211524&w=2
http://www.guninski.com/where_do_you_want_billg_to_go_today_2.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/11956Exploit, Patch, Vendor Advisory
http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.htmlPatch, Vendor Advisory, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/18522
http://marc.info/?l=bugtraq&m=110383108211524&w=2
http://www.guninski.com/where_do_you_want_billg_to_go_today_2.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/11956Exploit, Patch, Vendor Advisory
http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.htmlPatch, Vendor Advisory, URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/18522

Timeline

Published: Dec 15, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-13352.1Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consump CVE-2004-13362.1The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary CVE-2004-13377.2The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched CVE-2004-13386.5The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLRO CVE-2004-13396.5SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows CVE-2004-13402.1Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local user CVE-2004-13414.3Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the a CVE-2004-13427.5CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver acc CVE-2004-13435.0CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repoui CVE-2004-13457.2Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser"CVE-2004-13462.1The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe reque CVE-2004-13475.0X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X Display Manager Contr