Lucene search

K
nvd[email protected]NVD:CVE-2007-4997
HistoryNov 06, 2007 - 7:46 p.m.

CVE-2007-4997

2007-11-0619:46:00
CWE-189
web.nvd.nist.gov
9

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6

Confidence

Low

EPSS

0.138

Percentile

95.7%

Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an β€œoff-by-two error.”

Affected configurations

Nvd
Node
linuxlinux_kernelRange≀2.6.22.7

References

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6

Confidence

Low

EPSS

0.138

Percentile

95.7%