VULNERABILITY INTELLIGENCE

CVE-2004-0370

CVSS score2.1 LOW
EPSS probability0.40%
CISA KEVNot currently listed
Published2004-05-04
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.

Primary references