2.1low
CVE-2004-0370
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options,…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known
Summary
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.
Exploit prediction (EPSS)
0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
References
- secunia.com /advisories/11233 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/15662 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/9992 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2004-0370
- NVD: CVE-2004-0370
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.