CVE-2004-2013

HIGH

Linux Kernel < 2.4.25 - Integer Overflow via SCTP_SOCKOPT_DEBUG_NAME Option

Title source: llm

Description

Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.

References (5)

Core 5

Core References

Mailing List, Patch vendor-advisory x_refsource_trustix

http://marc.info/?l=bugtraq&m=108456230815842&w=2

Broken Link, Exploit, Patch mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html

Broken Link mailing-list x_refsource_fulldisc

http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/10326

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/16117

Scores

CVSS v3 7.8

EPSS 0.0062

EPSS Percentile 45.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (1)

linux/linux_kernel < 2.4.25

Published Dec 31, 2004

Tracked Since Feb 18, 2026