CVE-2004-0626: Medium severity Conectiva Linux vulnerability
The tcpfindoption function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0626?
CVE-2004-0626 has a medium severity rating as it allows remote attackers to cause a denial of service by exhausting CPU resources.
How do I fix CVE-2004-0626?
To fix CVE-2004-0626, upgrade to a patched version of the Linux kernel or the affected Linux distributions that address this vulnerability.
Which versions of Linux are affected by CVE-2004-0626?
CVE-2004-0626 affects the Linux kernel 2.6 and specific distributions like Conectiva Linux 10, Gentoo Linux, and various versions of SUSE Linux.
What kind of attack does CVE-2004-0626 enable?
CVE-2004-0626 enables a denial of service attack by allowing attackers to trigger an infinite loop in the tcp_find_option function.
Is CVE-2004-0626 a known vulnerability?
Yes, CVE-2004-0626 is a well-documented vulnerability that has been noted since it was disclosed in 2004.