CVE-2004-1137 Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1...
HighCVSS 10.0
EPSS 20.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.4.0 | No fix listed |
| Linux kernel | = 2.4.0-test1 | No fix listed |
| Linux kernel | = 2.4.0-test10 | No fix listed |
| Linux kernel | = 2.4.0-test11 | No fix listed |
| Linux kernel | = 2.4.0-test12 | No fix listed |
| Linux kernel | = 2.4.0-test2 | No fix listed |
| Linux kernel | = 2.4.0-test3 | No fix listed |
| Linux kernel | = 2.4.0-test4 | No fix listed |
| Linux kernel | = 2.4.0-test5 | No fix listed |
| Linux kernel | = 2.4.0-test6 | No fix listed |
| Linux kernel | = 2.4.0-test7 | No fix listed |
| Linux kernel | = 2.4.0-test8 | No fix listed |
| Linux kernel | = 2.4.0-test9 | No fix listed |
| Linux kernel | = 2.4.1 | No fix listed |
| Linux kernel | = 2.4.2 | No fix listed |
| Linux kernel | = 2.4.3 | No fix listed |
| Linux kernel | = 2.4.4 | No fix listed |
| Linux kernel | = 2.4.5 | No fix listed |
| Linux kernel | = 2.4.6 | No fix listed |
| Linux kernel | = 2.4.7 | No fix listed |
| Linux kernel | = 2.4.8 | No fix listed |
| Linux kernel | = 2.4.9 | No fix listed |
| Linux kernel | = 2.4.10 | No fix listed |
| Linux kernel | = 2.4.11 | No fix listed |
| Linux kernel | = 2.4.12 | No fix listed |
Show 71 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.4.13 | No fix listed |
| Linux kernel | = 2.4.14 | No fix listed |
| Linux kernel | = 2.4.15 | No fix listed |
| Linux kernel | = 2.4.16 | No fix listed |
| Linux kernel | = 2.4.17 | No fix listed |
| Linux kernel | = 2.4.18 | No fix listed |
| Linux kernel | = 2.4.18-pre1 | No fix listed |
| Linux kernel | = 2.4.18-pre2 | No fix listed |
| Linux kernel | = 2.4.18-pre3 | No fix listed |
| Linux kernel | = 2.4.18-pre4 | No fix listed |
| Linux kernel | = 2.4.18-pre5 | No fix listed |
| Linux kernel | = 2.4.18-pre6 | No fix listed |
| Linux kernel | = 2.4.18-pre7 | No fix listed |
| Linux kernel | = 2.4.18-pre8 | No fix listed |
| Linux kernel | = 2.4.19 | No fix listed |
| Linux kernel | = 2.4.19-pre1 | No fix listed |
| Linux kernel | = 2.4.19-pre2 | No fix listed |
| Linux kernel | = 2.4.19-pre3 | No fix listed |
| Linux kernel | = 2.4.19-pre4 | No fix listed |
| Linux kernel | = 2.4.19-pre5 | No fix listed |
| Linux kernel | = 2.4.19-pre6 | No fix listed |
| Linux kernel | = 2.4.20 | No fix listed |
| Linux kernel | = 2.4.21 | No fix listed |
| Linux kernel | = 2.4.21-pre1 | No fix listed |
| Linux kernel | = 2.4.21-pre4 | No fix listed |
| Linux kernel | = 2.4.21-pre7 | No fix listed |
| Linux kernel | = 2.4.22 | No fix listed |
| Linux kernel | = 2.4.23 | No fix listed |
| Linux kernel | = 2.4.23-pre9 | No fix listed |
| Linux kernel | = 2.4.23_ow2 | No fix listed |
| Linux kernel | = 2.4.24 | No fix listed |
| Linux kernel | = 2.4.24_ow1 | No fix listed |
| Linux kernel | = 2.4.25 | No fix listed |
| Linux kernel | = 2.4.26 | No fix listed |
| Linux kernel | = 2.4.27 | No fix listed |
| Linux kernel | = 2.4.27-pre1 | No fix listed |
| Linux kernel | = 2.4.27-pre2 | No fix listed |
| Linux kernel | = 2.4.27-pre3 | No fix listed |
| Linux kernel | = 2.4.27-pre4 | No fix listed |
| Linux kernel | = 2.4.27-pre5 | No fix listed |
| Linux kernel | = 2.4.28 | No fix listed |
| Linux kernel | = 2.6.0 | No fix listed |
| Linux kernel | = 2.6.0-test1 | No fix listed |
| Linux kernel | = 2.6.0-test10 | No fix listed |
| Linux kernel | = 2.6.0-test11 | No fix listed |
| Linux kernel | = 2.6.0-test2 | No fix listed |
| Linux kernel | = 2.6.0-test3 | No fix listed |
| Linux kernel | = 2.6.0-test4 | No fix listed |
| Linux kernel | = 2.6.0-test5 | No fix listed |
| Linux kernel | = 2.6.0-test6 | No fix listed |
| Linux kernel | = 2.6.0-test7 | No fix listed |
| Linux kernel | = 2.6.0-test8 | No fix listed |
| Linux kernel | = 2.6.0-test9 | No fix listed |
| Linux kernel | = 2.6.1 | No fix listed |
| Linux kernel | = 2.6.1-rc1 | No fix listed |
| Linux kernel | = 2.6.1-rc2 | No fix listed |
| Linux kernel | = 2.6.2 | No fix listed |
| Linux kernel | = 2.6.3 | No fix listed |
| Linux kernel | = 2.6.4 | No fix listed |
| Linux kernel | = 2.6.5 | No fix listed |
| Linux kernel | = 2.6.6 | No fix listed |
| Linux kernel | = 2.6.6-rc1 | No fix listed |
| Linux kernel | = 2.6.7 | No fix listed |
| Linux kernel | = 2.6.7-rc1 | No fix listed |
| Linux kernel | = 2.6.8 | No fix listed |
| Linux kernel | = 2.6.8-rc1 | No fix listed |
| Linux kernel | = 2.6.8-rc2 | No fix listed |
| Linux kernel | = 2.6.8-rc3 | No fix listed |
| Linux kernel | = 2.6.9-2.6.20 | No fix listed |
| Linux kernel | = 2.6_test9_cvs | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
References
- CLA-2005:930 vendor-advisory
- isec.pl
- 20041214 [USN-38-1] Linux kernel vulnerabilities mailing-list
- MDKSA-2005:022 vendor-advisory
- SUSE-SA:2004:044 vendor-advisory
- RHSA-2005:092 vendor-advisory
- FLSA:2336 vendor-advisory
- linux-ipmcsource-code-execution(18481) vdb-entry
- linux-igmpmarksources-dos(18482) vdb-entry
- oval:org.mitre.oval:def:11144 signature vdb-entry