Vulnerability identifier: #VU92879
Vulnerability risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID:
CWE-ID:
CWE-190
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to execute arbitrary code.
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel:
External links
http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html
http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html
http://www.securityfocus.com/bid/10326
http://marc.info/?l=bugtraq&m=108456230815842&w=2
http://exchange.xforce.ibmcloud.com/vulnerabilities/16117
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.