Published: 21/12/2007 Updated: 13/02/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel prior to 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote malicious users to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.18
linux linux kernel 2.4.36.6
linux linux kernel 2.6.21.6
linux linux kernel 2.4.36.2
linux linux kernel 2.6.20.16
linux linux kernel 2.6.19.4
linux linux kernel 2.6.20.21
linux linux kernel 2.4.36.1
linux linux kernel 2.6.20.17
linux linux kernel 2.6.21.5
linux linux kernel 2.4.36.4
linux linux kernel 2.6.20.20
linux linux kernel 2.4.36.3
linux linux kernel 2.6.20.18
linux linux kernel 2.6.19.7
linux linux kernel 2.6.20.19
linux linux kernel 2.4.36
linux linux kernel 2.6.19.6
linux linux kernel 2.6.19.5
linux linux kernel 2.4.36.5
linux linux kernel 2.2.27
linux linux kernel
linux linux kernel 2.6

The minix filesystem did not properly validate certain filesystem values If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service This was only vulnerable in Ubuntu 704 and 710 (CVE-2006-6058) ...

The minix filesystem did not properly validate certain filesystem values If a local attacker could trick the system into attempting to mount a corrupted minix filesystem, the kernel could be made to hang for long periods of time, resulting in a denial of service (CVE-2006-6058) ...

Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Security Response Team ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and two bugs arenow available for Red Hat Enterprise Linux 53 Extended Update SupportThis update has been rated as having important security imp ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 52 Extended Update SupportThis update has been rated as having important security ...

/* source: wwwsecurityfocuscom/bid/26943/info The Linux kernel is prone to a remote denial-of-service vulnerability because it fails to adequately validate specially crafted IPv6 'Hop-By-Hop' headers Attackers can exploit this issue to cause a kernel panic, denying service to legitimate users */ /* * Clemens Kurtenbach <ckurtenba ...

CWE-20 http://www.ubuntu.com/usn/usn-574-1 http://secunia.com/advisories/28706 http://www.securityfocus.com/bid/26943 http://secunia.com/advisories/28170 http://secunia.com/advisories/38015 https://bugzilla.redhat.com/show_bug.cgi?id=548641 http://www.redhat.com/support/errata/RHSA-2010-0019.html http://bugzilla.kernel.org/show_bug.cgi?id=8450 http://secunia.com/advisories/25505 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://www.redhat.com/support/errata/RHSA-2010-0053.html https://exchange.xforce.ibmcloud.com/vulnerabilities/39171 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083 https://usn.ubuntu.com/558-1/http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6 https://nvd.nist.gov https://usn.ubuntu.com/574-1/https://www.exploit-db.com/exploits/30902/

CVE-2007-4567

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect