CVE-2004-2013 | BDVDB-2026-10093 Detail

Description#

Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=108456230815842&w=2
http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html
http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html
http://www.securityfocus.com/bid/10326
https://exchange.xforce.ibmcloud.com/vulnerabilities/16117

Exploit#

No public exploit known

History#

Version 12005-05-10Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.