CVE-2007-6282

2008-05-0800:20:00

CWE-16

[email protected]

web.nvd.nist.gov

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.1

Confidence

High

EPSS

0.003

Percentile

70.1%

JSON

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.

Affected configurations

Nvd

Node

redhatenterprise_linuxMatchas_4

redhatenterprise_linuxMatches_4

redhatenterprise_linuxMatchws_4

redhatenterprise_linux_desktopMatch4

VendorProductVersionCPE
redhatenterprise_linuxas_4cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*
redhatenterprise_linuxes_4cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*
redhatenterprise_linuxws_4cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*
redhatenterprise_linux_desktop4cpe:2.3:o:redhat:enterprise_linux_desktop:4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	enterprise_linux	as_4	cpe:2.3:o:redhat:enterprise_linux:as_4:::::::*
redhat	enterprise_linux	es_4	cpe:2.3:o:redhat:enterprise_linux:es_4:::::::*
redhat	enterprise_linux	ws_4	cpe:2.3:o:redhat:enterprise_linux:ws_4:::::::*
redhat	enterprise_linux_desktop	4	cpe:2.3:o:redhat:enterprise_linux_desktop:4:::::::*