CVE-2004-1335: Low severity Linux Linux kernel vulnerability
Published Dec 15, 2004
·Updated
Memory leak in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ipcmsgsend function.
Affected Software
104 affected components
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.0-test1
Linux Linux kernel=2.4.0-test10
Linux Linux kernel=2.4.0-test11
Linux Linux kernel=2.4.0-test12
Linux Linux kernel=2.4.0-test2
Linux Linux kernel=2.4.0-test3
Linux Linux kernel=2.4.0-test4
Linux Linux kernel=2.4.0-test5
Linux Linux kernel=2.4.0-test6
Linux Linux kernel=2.4.0-test7
Linux Linux kernel=2.4.0-test8
Linux Linux kernel=2.4.0-test9
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.3
Linux Linux kernel=2.4.4
Linux Linux kernel=2.4.5
Linux Linux kernel=2.4.6
Linux Linux kernel=2.4.7
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.9
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.11
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.4.14
Linux Linux kernel=2.4.15
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.17
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18
Linux Linux kernel=2.4.18-pre1
Linux Linux kernel=2.4.18-pre2
Linux Linux kernel=2.4.18-pre3
Linux Linux kernel=2.4.18-pre4
Linux Linux kernel=2.4.18-pre5
Linux Linux kernel=2.4.18-pre6
Linux Linux kernel=2.4.18-pre7
Linux Linux kernel=2.4.18-pre8
Linux Linux kernel=2.4.19
Linux Linux kernel=2.4.19-pre1
Linux Linux kernel=2.4.19-pre2
Linux Linux kernel=2.4.19-pre3
Linux Linux kernel=2.4.19-pre4
Linux Linux kernel=2.4.19-pre5
Linux Linux kernel=2.4.19-pre6
Linux Linux kernel=2.4.20
Linux Linux kernel=2.4.21
Linux Linux kernel=2.4.21-pre1
Linux Linux kernel=2.4.21-pre4
Linux Linux kernel=2.4.21-pre7
Linux Linux kernel=2.4.22
Linux Linux kernel=2.4.23
Linux Linux kernel=2.4.23-pre9
Linux Linux kernel=2.4.23_ow2
Linux Linux kernel=2.4.24
Linux Linux kernel=2.4.24_ow1
Linux Linux kernel=2.4.25
Linux Linux kernel=2.4.26
Linux Linux kernel=2.4.27
Linux Linux kernel=2.4.27-pre1
Linux Linux kernel=2.4.27-pre2
Linux Linux kernel=2.4.27-pre3
Linux Linux kernel=2.4.27-pre4
Linux Linux kernel=2.4.27-pre5
Linux Linux kernel=2.4.28
Linux Linux kernel=2.6.0
Linux Linux kernel=2.6.0-test1
Linux Linux kernel=2.6.0-test10
Linux Linux kernel=2.6.0-test11
Linux Linux kernel=2.6.0-test2
Linux Linux kernel=2.6.0-test3
Linux Linux kernel=2.6.0-test4
Linux Linux kernel=2.6.0-test5
Linux Linux kernel=2.6.0-test6
Linux Linux kernel=2.6.0-test7
Linux Linux kernel=2.6.0-test8
Linux Linux kernel=2.6.0-test9
Linux Linux kernel=2.6.1
Linux Linux kernel=2.6.1-rc1
Linux Linux kernel=2.6.1-rc2
Linux Linux kernel=2.6.2
Linux Linux kernel=2.6.3
Linux Linux kernel=2.6.4
Linux Linux kernel=2.6.5
Linux Linux kernel=2.6.6
Linux Linux kernel=2.6.6-rc1
Linux Linux kernel=2.6.7
Linux Linux kernel=2.6.7-rc1
Linux Linux kernel=2.6.8
Linux Linux kernel=2.6.8-rc1
Linux Linux kernel=2.6.8-rc2
Linux Linux kernel=2.6.8-rc3
Linux Linux kernel=2.6.9-2.6.20
Linux Linux kernel=2.6.10-rc2
Linux Linux kernel=2.6_test9_cvs
redhat Fedora Core=core_1.0
redhat Fedora Core=core_2.0
redhat Fedora Core=core_3.0
redhat Linux=7.3
redhat Linux=7.3
redhat Linux=7.3
redhat Linux=9.0
Remediation
Patch Available
Event History
Dec 15, 2004
CVE Published
via NVD·05:00 AM
Jan 6, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1335?
CVE-2004-1335 is classified as a medium severity vulnerability that could lead to a denial of service by causing excessive memory consumption.
2
How do I fix CVE-2004-1335?
To mitigate CVE-2004-1335, upgrade to Linux kernel version 2.6.10 or later, where this vulnerability has been addressed.
3
Who is affected by CVE-2004-1335?
CVE-2004-1335 affects local users running Linux kernels prior to version 2.6.10.
4
What type of vulnerability is CVE-2004-1335?
CVE-2004-1335 is a memory leak vulnerability in the Linux kernel's handling of IP options, which can be exploited for denial of service.
5
Can CVE-2004-1335 be exploited remotely?
No, CVE-2004-1335 requires local access to the system for exploitation.