CVE-2007-4997
5.9 Medium
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.14 Low
EPSS
Percentile
95.7%
Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an βoff-by-two error.β
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | le | 2.6.22.7 |
References
ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/ChangeLog-2.6.16.57-rc1
git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commitdiff%3Bh=04045f98e0457aba7d4e6736f37eed189c48a5f7
lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html
secunia.com/advisories/27555
secunia.com/advisories/27614
secunia.com/advisories/27824
secunia.com/advisories/27912
secunia.com/advisories/28033
secunia.com/advisories/28162
secunia.com/advisories/28170
secunia.com/advisories/28706
secunia.com/advisories/28806
secunia.com/advisories/28971
www.debian.org/security/2007/dsa-1428
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23
www.mandriva.com/security/advisories?name=MDKSA-2007:226
www.mandriva.com/security/advisories?name=MDKSA-2007:232
www.mandriva.com/security/advisories?name=MDVSA-2008:008
www.mandriva.com/security/advisories?name=MDVSA-2008:105
www.novell.com/linux/security/advisories/2007_59_kernel.html
www.redhat.com/support/errata/RHSA-2007-0993.html
www.redhat.com/support/errata/RHSA-2007-1104.html
www.securityfocus.com/bid/26337
www.ubuntu.com/usn/usn-558-1
www.ubuntu.com/usn/usn-574-1
www.ubuntu.com/usn/usn-578-1
www.vupen.com/english/advisories/2007/3718
exchange.xforce.ibmcloud.com/vulnerabilities/38247
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10596
Social References
More
Related
5.9 Medium
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
0.14 Low
EPSS
Percentile
95.7%