CVE-2004-0424: Integer Overflow
Integer overflow in the ipsetsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCASTMSFILTER socket option.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0424?
CVE-2004-0424 has a moderate severity rating as it can cause denial of service and potential arbitrary code execution.
How do I fix CVE-2004-0424?
To fix CVE-2004-0424, you should update your Linux kernel to a version that is not vulnerable, specifically versions newer than 2.6.3.
Who is affected by CVE-2004-0424?
CVE-2004-0424 affects local users on systems running Linux kernel versions from 2.4.22 to 2.6.3, along with specific distributions like Slackware.
What vulnerabilities are associated with CVE-2004-0424?
CVE-2004-0424 is associated with integer overflow issues in the ip_setsockopt function that can lead to system crashes.
What does the MCAST_MSFILTER socket option have to do with CVE-2004-0424?
The MCAST_MSFILTER socket option is exploited in CVE-2004-0424, allowing local users to trigger the integer overflow.