CVE-2004-0424: linux linux_kernel
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2004-0424 is a high (CVSS 7.2) vulnerability in linux linux_kernel. EPSS estimates a 1.24% chance of exploitation in the next 30 days, higher than 68.6% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 30-04-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.24%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
0.00 pp
From 1.24% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Linux Kernel 2.6.3 - 'setsockopt' Local Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Linux1 product
- linux_kernel2.4.22 | 2.4.23 | 2.4.23:pre9 | 2.4.23_ow2 | 2.4.24 | 2.4.24_ow1 | 2.4.25 | 2.6.1 | 2.6.1:rc1 | 2.6.1:rc2 | 2.6.2 | 2.6.3
Sgi1 product
- propack3.0
Slackware1 product
- slackware_linuxEOL9.1 | current
3 vendors · 3 products
References
12 links- www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586Vendor AdvisoryX Refsource SLACKWARE
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214VDB EntrySignatureX Refsource OVAL