First published: Fri Dec 31 2004(Updated: )
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Linux kernel | <=2.4.25 | |
Linux kernel | =2.0.30 | |
Linux kernel | =2.0.18 | |
Linux kernel | =2.4.18-pre1 | |
Linux kernel | =2.4.15 | |
Linux kernel | =2.2.10 | |
Linux kernel | =2.0.20 | |
Linux kernel | =2.0.23 | |
Linux kernel | =2.4.0-test1 | |
Linux kernel | =2.0.27 | |
Linux kernel | =2.2.21 | |
Linux kernel | =2.4.11 | |
Linux kernel | =2.4.18-pre3 | |
Linux kernel | =2.0.31 | |
Linux kernel | =2.0.24 | |
Linux kernel | =2.4.18-pre5 | |
Linux kernel | =2.2.13 | |
Linux kernel | =2.0.9 | |
Linux kernel | =2.0.37 | |
Linux kernel | =2.2.0 | |
Linux kernel | =2.4.0-test6 | |
Linux kernel | =2.2.6 | |
Linux kernel | =2.4.19-pre1 | |
Linux kernel | =2.4.21-pre7 | |
Linux kernel | =2.4.12 | |
Linux kernel | =2.0.14 | |
Linux kernel | =2.4.13 | |
Linux kernel | =2.4.19-pre4 | |
Linux kernel | =2.2.18 | |
Linux kernel | =2.1 | |
Linux kernel | =2.2.3 | |
Linux kernel | =2.0.34 | |
Linux kernel | =2.4.17 | |
Linux kernel | =2.0.11 | |
Linux kernel | =2.0.15 | |
Linux kernel | =2.4.21-pre1 | |
Linux kernel | =2.0.4 | |
Linux kernel | =2.4.21 | |
Linux kernel | =2.4.23_ow2 | |
Linux kernel | =2.0.6 | |
Linux kernel | =2.2.2 | |
Linux kernel | =2.0.5 | |
Linux kernel | =2.2.22 | |
Linux kernel | =2.4.23 | |
Linux kernel | =2.3.0 | |
Linux kernel | =2.2.5 | |
Linux kernel | =2.4.0-test3 | |
Linux kernel | =2.0.21 | |
Linux kernel | =2.3.99-pre6 | |
Linux kernel | =2.0.26 | |
Linux kernel | =2.4.7 | |
Linux kernel | =2.2.15-pre16 | |
Linux kernel | =2.0.28 | |
Linux kernel | =2.4.25 | |
Linux kernel | =2.3.99 | |
Linux kernel | =2.2.8 | |
Linux kernel | =2.4.0-test8 | |
Linux kernel | =2.4.24 | |
Linux kernel | =2.4.9 | |
Linux kernel | =2.2.7 | |
Linux kernel | =2.2.16 | |
Linux kernel | =2.4.23-pre9 | |
Linux kernel | =2.0 | |
Linux kernel | =2.0.39 | |
Linux kernel | =2.2.1 | |
Linux kernel | =2.0.29 | |
Linux kernel | =2.0.1 | |
Linux kernel | =2.2.12 | |
Linux kernel | =2.4.0-test7 | |
Linux kernel | =2.3.99-pre5 | |
Linux kernel | =2.0.32 | |
Linux kernel | =2.4.24_ow1 | |
Linux kernel | =2.4.18-pre4 | |
Linux kernel | =2.4.19-pre6 | |
Linux kernel | =2.4.10 | |
Linux kernel | =2.2.25 | |
Linux kernel | =2.4.0 | |
Linux kernel | =2.4.2 | |
Linux kernel | =2.4.19-pre2 | |
Linux kernel | =2.4.0-test12 | |
Linux kernel | =2.4.18-pre6 | |
Linux kernel | =2.4.16 | |
Linux kernel | =2.2.23 | |
Linux kernel | =2.4.8 | |
Linux kernel | =2.0.2 | |
Linux kernel | =2.4.19-pre3 | |
Linux kernel | =2.4.19 | |
Linux kernel | =2.4.14 | |
Linux kernel | =2.0.36 | |
Linux kernel | =2.0.13 | |
Linux kernel | =2.4.0-test2 | |
Linux kernel | =2.2.19 | |
Linux kernel | =2.4.18 | |
Linux kernel | =2.0.17 | |
Linux kernel | =2.0.7 | |
Linux kernel | =2.4.19-pre5 | |
Linux kernel | =2.1.89 | |
Linux kernel | =2.0.16 | |
Linux kernel | =2.4.21-pre4 | |
Linux kernel | =2.2.15_pre20 | |
Linux kernel | =2.4.22 | |
Linux kernel | =2.2.20 | |
Linux kernel | =2.4.0-test5 | |
Linux kernel | =2.4.5 | |
Linux kernel | =2.2.15 | |
Linux kernel | =2.3.99-pre4 | |
Linux kernel | =2.3.99-pre3 | |
Linux kernel | =2.4.18 | |
Linux kernel | =2.0.10 | |
Linux kernel | =2.0.22 | |
Linux kernel | =2.2.4 | |
Linux kernel | =2.4.3 | |
Linux kernel | =2.2.14 | |
Linux kernel | =2.0.38 | |
Linux kernel | =2.2.11 | |
Linux kernel | =2.4.1 | |
Linux kernel | =2.4.4 | |
Linux kernel | =2.4.18-pre2 | |
Linux kernel | =2.0.33 | |
Linux kernel | =2.0.3 | |
Linux kernel | =2.2.24 | |
Linux kernel | =2.2.16-pre6 | |
Linux kernel | =2.4.18-pre8 | |
Linux kernel | =2.3.99-pre2 | |
Linux kernel | =2.2.17 | |
Linux kernel | =2.0.8 | |
Linux kernel | =2.4.0-test11 | |
Linux kernel | =2.4.6 | |
Linux kernel | =2.4.0-test4 | |
Linux kernel | =2.0.25 | |
Linux kernel | =2.2.9 | |
Linux kernel | =2.0.12 | |
Linux kernel | =2.4.0-test10 | |
Linux kernel | =2.4.20 | |
Linux kernel | =2.4.0-test9 | |
Linux kernel | =2.3.99-pre1 | |
Linux kernel | =2.4.18-pre7 | |
Linux kernel | =2.0.35 | |
Linux kernel | =2.3.99-pre7 | |
Linux kernel | =2.0.19 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-2013 is considered to have high severity due to the potential for local users to execute arbitrary code.
To fix CVE-2004-2013, upgrade to a Linux kernel version later than 2.4.25 that addresses this vulnerability.
CVE-2004-2013 is caused by an integer overflow in the SCTP_SOCKOPT_DEBUG_NAME socket option in the Linux kernel.
CVE-2004-2013 affects Linux kernel versions 2.4.25 and earlier.
CVE-2004-2013 can be exploited by local users with the ability to set socket options.