CVE-2004-1237 Denial of service in n/a

Low 2.1 Published Updated

Local attackers can crash the system via unknown vectors in the audit subsystem's system call filtering code.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2004-1237?

CVE-2004-1237 is a low-severity denial of service vulnerability in Linux kernel, published on 20 Jan 2005. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.

Which versions are affected by CVE-2004-1237?

It affects 4 products.

Products include Linux kernel, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Suse Suse Linux.

How do I fix CVE-2004-1237?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2004-1237 being exploited?

There is no known exploitation of CVE-2004-1237 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-8r7f-wggx-p7fj.

Is CVE-2004-1237 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free