CVE-2004-1335

CVE-2004-1335 describes a memory leak in the ip_options_get function within the Linux kernel, affecting versions prior to 2.6.10, including various Red Hat and Fedora Core distributions. This vulnerability allows local users to trigger a denial of service by repeatedly invoking the ip_cmsg_send function, leading to memory exhaustion. Rated with a CVSS score of 2.1, it has a low attack complexity and requires local access, with the primary impact being system unavailability. While an ExploitDB entry exists (EDB-692) referencing a local overflow, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.