CVE-2004-2013

HIGH · CVSS 7.8 EPSS 0.62%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2004-2013

Severity

HIGH

CVSS

7.8

EPSS

0.62%

Linux

Original Filing — NVD Description

Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.