Lucene search
HistoryJun 11, 2007 - 11:30 p.m.
CVE-2007-2876
CVSS2
6.1
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.1
Confidence
High
EPSS
0.045
Percentile
92.5%
The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.
Affected configurations
Node
linuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test10
ORlinuxlinux_kernelMatch2.6.0test11
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6.1rc3
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.2rc1
ORlinuxlinux_kernelMatch2.6.2rc2
ORlinuxlinux_kernelMatch2.6.2rc3
ORlinuxlinux_kernelMatch2.6.3
ORlinuxlinux_kernelMatch2.6.3rc1
ORlinuxlinux_kernelMatch2.6.3rc2
ORlinuxlinux_kernelMatch2.6.3rc3
ORlinuxlinux_kernelMatch2.6.3rc4
ORlinuxlinux_kernelMatch2.6.4
ORlinuxlinux_kernelMatch2.6.4rc1
ORlinuxlinux_kernelMatch2.6.4rc2
ORlinuxlinux_kernelMatch2.6.4rc3
ORlinuxlinux_kernelMatch2.6.5
ORlinuxlinux_kernelMatch2.6.5rc1
ORlinuxlinux_kernelMatch2.6.5rc2
ORlinuxlinux_kernelMatch2.6.5rc3
ORlinuxlinux_kernelMatch2.6.6
ORlinuxlinux_kernelMatch2.6.6rc1
ORlinuxlinux_kernelMatch2.6.6rc2
ORlinuxlinux_kernelMatch2.6.6rc3
ORlinuxlinux_kernelMatch2.6.7
ORlinuxlinux_kernelMatch2.6.7rc1
ORlinuxlinux_kernelMatch2.6.7rc2
ORlinuxlinux_kernelMatch2.6.7rc3
ORlinuxlinux_kernelMatch2.6.8
ORlinuxlinux_kernelMatch2.6.8rc1
ORlinuxlinux_kernelMatch2.6.8rc2
ORlinuxlinux_kernelMatch2.6.8rc3
ORlinuxlinux_kernelMatch2.6.8rc4
ORlinuxlinux_kernelMatch2.6.8.1
ORlinuxlinux_kernelMatch2.6.8.1.5
ORlinuxlinux_kernelMatch2.6.9
ORlinuxlinux_kernelMatch2.6.9rc1
ORlinuxlinux_kernelMatch2.6.9rc2
ORlinuxlinux_kernelMatch2.6.9rc3
ORlinuxlinux_kernelMatch2.6.9rc4
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.10rc1
ORlinuxlinux_kernelMatch2.6.10rc2
ORlinuxlinux_kernelMatch2.6.10rc3
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11rc1
ORlinuxlinux_kernelMatch2.6.11rc2
ORlinuxlinux_kernelMatch2.6.11rc3
ORlinuxlinux_kernelMatch2.6.11rc4
ORlinuxlinux_kernelMatch2.6.11rc5
ORlinuxlinux_kernelMatch2.6.11.1
ORlinuxlinux_kernelMatch2.6.11.2
ORlinuxlinux_kernelMatch2.6.11.3
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.9
ORlinuxlinux_kernelMatch2.6.11.10
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.11_rc1_bk6
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12rc1
ORlinuxlinux_kernelMatch2.6.12rc2
ORlinuxlinux_kernelMatch2.6.12rc3
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12rc6
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.12.12
ORlinuxlinux_kernelMatch2.6.12.22
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13rc1
ORlinuxlinux_kernelMatch2.6.13rc2
ORlinuxlinux_kernelMatch2.6.13rc3
ORlinuxlinux_kernelMatch2.6.13rc4
ORlinuxlinux_kernelMatch2.6.13rc5
ORlinuxlinux_kernelMatch2.6.13rc6
ORlinuxlinux_kernelMatch2.6.13rc7
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.13.5
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14rc5
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.14.6
ORlinuxlinux_kernelMatch2.6.14.7
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15rc1
ORlinuxlinux_kernelMatch2.6.15rc2
ORlinuxlinux_kernelMatch2.6.15rc3
ORlinuxlinux_kernelMatch2.6.15rc4
ORlinuxlinux_kernelMatch2.6.15rc5
ORlinuxlinux_kernelMatch2.6.15rc6
ORlinuxlinux_kernelMatch2.6.15rc7
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.6
ORlinuxlinux_kernelMatch2.6.15.7
ORlinuxlinux_kernelMatch2.6.15.11
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16rc1
ORlinuxlinux_kernelMatch2.6.16rc2
ORlinuxlinux_kernelMatch2.6.16rc3
ORlinuxlinux_kernelMatch2.6.16rc4
ORlinuxlinux_kernelMatch2.6.16rc5
ORlinuxlinux_kernelMatch2.6.16rc6
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.2
ORlinuxlinux_kernelMatch2.6.16.3
ORlinuxlinux_kernelMatch2.6.16.4
ORlinuxlinux_kernelMatch2.6.16.5
ORlinuxlinux_kernelMatch2.6.16.6
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.8
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.10
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.14
ORlinuxlinux_kernelMatch2.6.16.15
ORlinuxlinux_kernelMatch2.6.16.16
ORlinuxlinux_kernelMatch2.6.16.17
ORlinuxlinux_kernelMatch2.6.16.18
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.20
ORlinuxlinux_kernelMatch2.6.16.21
ORlinuxlinux_kernelMatch2.6.16.22
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.24
ORlinuxlinux_kernelMatch2.6.16.25
ORlinuxlinux_kernelMatch2.6.16.26
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.16.28
ORlinuxlinux_kernelMatch2.6.16.29
ORlinuxlinux_kernelMatch2.6.16.30
ORlinuxlinux_kernelMatch2.6.16.31
ORlinuxlinux_kernelMatch2.6.16.32
ORlinuxlinux_kernelMatch2.6.16.33
ORlinuxlinux_kernelMatch2.6.16.34
ORlinuxlinux_kernelMatch2.6.16.35
ORlinuxlinux_kernelMatch2.6.16.36
ORlinuxlinux_kernelMatch2.6.16.37
ORlinuxlinux_kernelMatch2.6.16.38
ORlinuxlinux_kernelMatch2.6.16.39
ORlinuxlinux_kernelMatch2.6.16.40
ORlinuxlinux_kernelMatch2.6.16.41
ORlinuxlinux_kernelMatch2.6.16_rc7
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc1
ORlinuxlinux_kernelMatch2.6.17rc2
ORlinuxlinux_kernelMatch2.6.17rc3
ORlinuxlinux_kernelMatch2.6.17rc4
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17rc6
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.4
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.9
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18rc1
ORlinuxlinux_kernelMatch2.6.18rc2
ORlinuxlinux_kernelMatch2.6.18rc3
ORlinuxlinux_kernelMatch2.6.18rc4
ORlinuxlinux_kernelMatch2.6.18rc5
ORlinuxlinux_kernelMatch2.6.18rc6
ORlinuxlinux_kernelMatch2.6.18rc7
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.2
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.18.5
ORlinuxlinux_kernelMatch2.6.18.6
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19rc1
ORlinuxlinux_kernelMatch2.6.19rc2
ORlinuxlinux_kernelMatch2.6.19rc3
ORlinuxlinux_kernelMatch2.6.19rc4
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.19.3
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.6
ORlinuxlinux_kernelMatch2.6.20.7
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.10
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.12
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.14
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21git1
ORlinuxlinux_kernelMatch2.6.21git2
ORlinuxlinux_kernelMatch2.6.21git3
ORlinuxlinux_kernelMatch2.6.21git4
ORlinuxlinux_kernelMatch2.6.21git5
ORlinuxlinux_kernelMatch2.6.21git6
ORlinuxlinux_kernelMatch2.6.21git7
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.3
ORlinuxlinux_kernelMatch2.6_test9_cvs
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.0 | cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:* |
References
marc.info/?l=linux-kernel&m=118128610219959&w=2
marc.info/?l=linux-kernel&m=118128622431272&w=2
osvdb.org/37112
rhn.redhat.com/errata/RHSA-2007-0488.html
secunia.com/advisories/25838
secunia.com/advisories/25961
secunia.com/advisories/26133
secunia.com/advisories/26139
secunia.com/advisories/26289
secunia.com/advisories/26450
secunia.com/advisories/26620
secunia.com/advisories/26664
secunia.com/advisories/26760
secunia.com/advisories/27227
support.avaya.com/elmodocs2/security/ASA-2007-287.htm
www.debian.org/security/2007/dsa-1356
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4
www.mandriva.com/security/advisories?name=MDKSA-2007:171
www.mandriva.com/security/advisories?name=MDKSA-2007:196
www.novell.com/linux/security/advisories/2007_43_kernel.html
www.novell.com/linux/security/advisories/2007_51_kernel.html
www.novell.com/linux/security/advisories/2007_53_kernel.html
www.redhat.com/support/errata/RHSA-2007-0705.html
www.securityfocus.com/bid/24376
www.ubuntu.com/usn/usn-486-1
www.ubuntu.com/usn/usn-489-1
www.ubuntu.com/usn/usn-510-1
www.vupen.com/english/advisories/2007/2105
exchange.xforce.ibmcloud.com/vulnerabilities/34777
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10116
Related
nessus
nessus
Linux Kernel Netfilter *_conntrack_proto_sctp.c sctp_new Function Unknown Chunk Type Remote DoS
2007-06-12 00:00:00
Fedora 7 : kernel-2.6.21-1.3228.fc7 (2007-0409)
2007-11-06 00:00:00
Fedora Core 5 : kernel-2.6.20-1.2320.fc5 (2007-599)
2007-06-27 00:00:00
cvelist
cvelist
CVE-2007-2876
2007-06-11 23:00:00
cve
cve
CVE-2007-2876
2007-06-11 23:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:20:01
ubuntucve
ubuntucve
CVE-2007-2876
2007-06-11 00:00:00
prion
prion
Null pointer dereference
2007-06-11 23:30:00
checkpoint_advisories
checkpoint_advisories
f5
f5
K8920 : Linux kernel vulnerability CVE-2007-2876
2013-03-18 00:00:00
SOL8920 - Linux kernel vulnerability CVE-2007-2876
2008-06-30 00:00:00
openvas
openvas
Fedora Update for kernel FEDORA-2007-0409
2009-02-27 00:00:00
Fedora Update for kernel FEDORA-2007-0409
2009-02-27 00:00:00
Fedora Update for kernel FEDORA-2007-600
2009-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: kernel-2.6.21-1.3228.fc7
2007-06-13 21:07:55
[SECURITY] Fedora Core 6 Update: kernel-2.6.20-1.2962.fc6
2007-06-25 17:41:33
[SECURITY] Fedora Core 5 Update: kernel-2.6.20-1.2320.fc5
2007-06-21 19:26:39
securityvulns
securityvulns
Linux kernel multiple security vulnerabilities
2007-07-19 00:00:00
[USN-489-1] Linux kernel vulnerabilities
2007-07-19 00:00:00
centos
centos
kernel security update
2007-09-14 00:58:44
kernel security update
2007-06-26 23:50:36
suse
suse
remote denial of service in kernel
2007-07-09 14:31:09
remote denial of service in kernel
2007-09-06 17:18:55
local privilege escalation in kernel
2007-10-12 16:04:36
redhat
redhat
(RHSA-2007:0705) Important: kernel security update
2007-09-13 00:00:00
(RHSA-2007:0488) Important: kernel security update
2007-06-25 00:00:00
oraclelinux
oraclelinux
Important: kernel security update
2007-09-14 00:00:00
Important: kernel security update
2007-06-26 00:00:00
debian
debian
osv
osv
linux-2.6 - several vulnerabilities
2007-08-15 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2007-07-18 00:00:00
Linux kernel vulnerabilities
2007-08-31 00:00:00
Linux kernel vulnerabilities
2007-07-19 00:00:00
CVSS2
6.1
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.1
Confidence
High
EPSS
0.045
Percentile
92.5%
Related for NVD:CVE-2007-2876