Lucene search
HistoryAug 14, 2008 - 10:41 p.m.
CVE-2008-3686
linux kernel
vulnerability
denial of service
cve-2008-3686
nvd
ipv6
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service (kernel OOPS) via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference.
Affected configurations
Node
linuxlinux_kernelMatch2.6.26rc4
ORlinuxlinux_kernelMatch2.6.26.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux:linux_kernel | linux linux kernel | eq | 2.6.26 |
| linux:linux_kernel | linux linux kernel | eq | 2.6.26.2 |
Related
prion
prion
Null pointer dereference
2008-08-14 22:41:00
nvd
nvd
CVE-2008-3686
2008-08-14 22:41:00
ubuntucve
ubuntucve
CVE-2008-3686
2008-08-14 00:00:00
redhatcve
redhatcve
CVE-2008-3686
2015-10-30 10:25:22
cvelist
cvelist
CVE-2008-3686
2008-08-14 22:00:00
4.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
6.2 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-3686