Published: 29/05/2007 Updated: 11/10/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 495

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The VFAT compat ioctls in the Linux kernel prior to 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.21.1

Several local vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2878 Bart Oldeman reported a denial of service (DoS) issue in the VFAT filesystem that allows local user ...

A flaw was discovered in the PPP over Ethernet implementation Local attackers could manipulate ioctls and cause kernel memory consumption leading to a denial of service (CVE-2007-2525) ...

The compat_sys_mount function allowed local users to cause a denial of service when mounting a smbfs filesystem in compatibility mode (CVE-2006-7203) ...

A flaw was discovered in dvb ULE decapsulation A remote attacker could send a specially crafted message and cause a denial of service (CVE-2006-4623) ...

/* source: wwwsecurityfocuscom/bid/24134/info The Linux Kernel is prone to a denial-of-service vulnerability A local attacker can exploit this issue to cause the kernel to crash, effectively denying service to legitimate users */ #include <sys/typesh> #include <sys/ioctlh> #include <direnth> #include ...

NVD-CWE-Other http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.2 http://www.securityfocus.com/bid/24134 http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm http://www.redhat.com/support/errata/RHSA-2007-0705.html http://www.redhat.com/support/errata/RHSA-2007-0939.html http://www.ubuntu.com/usn/usn-486-1 http://www.ubuntu.com/usn/usn-489-1 http://www.ubuntu.com/usn/usn-510-1 http://secunia.com/advisories/25505 http://secunia.com/advisories/26133 http://secunia.com/advisories/26139 http://secunia.com/advisories/26760 http://secunia.com/advisories/27436 http://secunia.com/advisories/27747 http://www.debian.org/security/2008/dsa-1479 http://secunia.com/advisories/28626 http://www.vupen.com/english/advisories/2007/2023 http://osvdb.org/35926 https://exchange.xforce.ibmcloud.com/vulnerabilities/34669 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11674 https://nvd.nist.gov https://www.debian.org/security/./dsa-1479 https://usn.ubuntu.com/510-1/https://www.exploit-db.com/exploits/30080/

CVE-2007-2878

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect