Unscored severity · published Jul 7, 2004
CVE-2004-0424
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.4.22; 2.4.23; 2.4.23; 2.4.23_ow2; 2.4.24; 2.4.24_ow1; +6 more · source: NVD
PR
Propack · Sgi
3.0 · source: NVD
SL
Slackware Linux · Slackware
9.1; current · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0424
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0424
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852
marc.info
http://marc.info/?l=bugtraq&m=108253171301153&w=2
Patch
http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt
Patch
http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2004:037
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability