CVE-2004-1334

CVE-2004-1334 describes an integer overflow vulnerability in the ip_options_get function of the Linux kernel, affecting versions prior to 2.6.10, including various Red Hat and Fedora Core distributions. A local attacker can exploit this flaw by providing a specially crafted cmsg_len value, leading to a buffer overflow and a denial of service (kernel crash). The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P), indicating local access and low attack complexity are required for a partial impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.