CVE-2004-1237 Denial of service in n/a
Local attackers can crash the system via unknown vectors in the audit subsystem's system call filtering code.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-1237?
CVE-2004-1237 is a low-severity denial of service vulnerability in Linux kernel, published on 20 Jan 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.
Which versions are affected by CVE-2004-1237?
It affects 4 products.
Products include Linux kernel, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Suse Suse Linux.
How do I fix CVE-2004-1237?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2004-1237 being exploited?
There is no known exploitation of CVE-2004-1237 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-8r7f-wggx-p7fj.