Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-1497
HistoryMar 16, 2007 - 10:19 p.m.

CVE-2007-1497

2007-03-1622:19:00
mitre
web.nvd.nist.gov
46
2
nf_conntrack
netfilter
linux kernel
cve-2007-1497
ip_ct_established
remote attackers
ipv6 fragments
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.024

Percentile

90.1%

JSON

nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.

Affected configurations

Nvd
Node
linuxlinux_kernelRange≤2.6.20.2
VendorProductVersionCPE
linuxlinux_kernelcpe:/o:linux:linux_kernel::::

Social References

More

Related

cvelist 1
ubuntucve 1
nvd 1
prion 1
veracode 1
securityvulns 2
openvas 8
debian 1
nessus 8
osv 1
redhat 1
centos 1
ubuntu 1
suse 1
oraclelinux 1
cvelist
cvelist
CVE-2007-1497
2007-03-16 22:00:00
ubuntucve
ubuntucve
CVE-2007-1497
2007-03-16 00:00:00
nvd
nvd
CVE-2007-1497
2007-03-16 22:19:00
prion
prion
Design/Logic Flaw
2007-03-16 22:19:00
veracode
veracode
Information Disclosure
2020-04-10 00:18:25
securityvulns
securityvulns
Linux netfilter multiple security vulnerabilities
2007-03-18 00:00:00
[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution
2007-05-25 00:00:00
openvas
openvas
Debian Security Advisory DSA 1289-1 (linux-2.6)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1289-1)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-464-1)
2009-03-23 00:00:00
debian
debian
[SECURITY] [DSA 1289-1] New Linux 2.6.18 packages fix several vulnerabilities
2007-05-13 11:33:16
nessus
nessus
Debian DSA-1289-1 : linux-2.6 - several vulnerabilities
2007-05-16 00:00:00
CentOS 5 : kernel (CESA-2007:0347)
2010-01-06 00:00:00
Oracle Linux 5 : kernel (ELSA-2007-0347)
2013-07-12 00:00:00
osv
osv
linux-2.6
2007-05-13 00:00:00
redhat
redhat
(RHSA-2007:0347) Important: kernel security and bug fix update
2007-05-16 00:00:00
centos
centos
kernel security update
2007-05-20 02:21:06
ubuntu
ubuntu
Linux kernel vulnerabilities
2007-05-24 00:00:00
suse
suse
remote denial of service in kernel
2007-07-09 14:31:09
oraclelinux
oraclelinux
Important: kernel security and bug fix update
2007-06-26 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.024

Percentile

90.1%

JSON
Related for CVE-2007-1497
cvelist1ubuntucve1nvd1prion1veracode1securityvulns2openvas8debian1nessus8osv1redhat1centos1ubuntu1suse1oraclelinux1