Lucene search

K
cve[email protected]CVE-2007-4567
HistoryDec 21, 2007 - 12:46 a.m.

CVE-2007-4567

2007-12-2100:46:00
CWE-20
web.nvd.nist.gov
40
8
cve-2007-4567
linux kernel
ipv6
denial of service
nvd

6.2 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.07 Low

EPSS

Percentile

93.9%

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

Social References

More

6.2 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.07 Low

EPSS

Percentile

93.9%