CVE-2004-1335

Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.

• http://marc.info/?l=bugtraq&m=110383108211524&w=2
• http://secunia.com/advisories/20163
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070
• http://www.debian.org/security/2006/dsa-1082
• http://www.guninski.com/where_do_you_want_billg_to_go_today_2.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-016.html
• http://www.redhat.com/support/errata/RHSA-2005-017.html
• http://www.securityfocus.com/bid/11956Exploit, Patch, Vendor Advisory
• http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.htmlPatch, Vendor Advisory, URL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18524
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11085
• http://marc.info/?l=bugtraq&m=110383108211524&w=2
• http://secunia.com/advisories/20163
• http://secunia.com/advisories/20202
• http://secunia.com/advisories/20338
• http://www.debian.org/security/2006/dsa-1067
• http://www.debian.org/security/2006/dsa-1069
• http://www.debian.org/security/2006/dsa-1070
• http://www.debian.org/security/2006/dsa-1082
• http://www.guninski.com/where_do_you_want_billg_to_go_today_2.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-016.html
• http://www.redhat.com/support/errata/RHSA-2005-017.html
• http://www.securityfocus.com/bid/11956Exploit, Patch, Vendor Advisory
• http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.htmlPatch, Vendor Advisory, URL Repurposed
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18524
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11085

Published

Dec 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1329Untrusted execution path vulnerability in the diag commands …
• CVE-2004-1330Buffer overflow in paginit in AIX 5.1 through 5.3 allows loc…
• CVE-2004-1331The execCommand method in Microsoft Internet Explorer 6.0 SP…
• CVE-2004-1332Stack-based buffer overflow in the FTP daemon in HP-UX 11.11…
• CVE-2004-1333Integer overflow in the vc_resize function in the Linux kern…
• CVE-2004-1334Integer overflow in the ip_options_get function in the Linux…
• CVE-2004-1336The xdvizilla script in tetex-bin 2.0.2 creates temporary fi…
• CVE-2004-1337The POSIX Capability Linux Security Module (LSM) for Linux k…
• CVE-2004-1338The triggers in Oracle 9i and 10g allow local users to gain …
• CVE-2004-1339SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_I…
• CVE-2004-1340Debian GNU/Linux 3.0 installs the libpam-radius-auth package…
• CVE-2004-1341Cross-site scripting (XSS) vulnerability in info2www before …