PT-2004-2909 · Linux · Linux Kernel

Published 2004-12-31 · Updated 2024-02-08 · CVE-2004-2013

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.4.25 and earlier

Description The issue is related to an integer overflow in the SCTP SOCKOPT DEBUG NAME SCTP socket option in socket.c. This overflow allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.

Recommendations For Linux kernel versions 2.4.25 and earlier, consider upgrading to a newer version to resolve the issue. As a temporary workaround, consider restricting access to the SCTP SOCKOPT DEBUG NAME socket option to minimize the risk of exploitation. Avoid using an optlen value of -1 in the affected socket option until the issue is resolved.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2004-2013

Affected Products

Linux Kernel

References · 7

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2013 · Security Note
• https://t.me/cvenotify/70623 · Telegram Post
• http://securityfocus.com/bid/10326 · Note
• http://marc.info/?l=bugtraq&m=108456230815842&w=2 · Patch, Vendor Advisory
• http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16117 · Note