vendor:
Linux Kernel
by:
iSEC Security Research
7.5
CVSS
HIGH
Denial of Service (DoS)
400
CWE
Product Name: Linux Kernel
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Linux
2004
Linux igmp.c local DoS
This code will crash the machine by exploiting a vulnerability in the Linux igmp.c module. The code creates a socket and sets various options using setsockopt to join a multicast group and add a source filter. However, it does not properly handle errors, leading to a crash. This vulnerability can be used to perform a denial of service attack on a Linux machine.
Mitigation:
There is no known mitigation for this vulnerability. It is recommended to avoid running untrusted code on the affected machine.