Null pointer dereference

2007-03-1019:19:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.

CPENameOperatorVersion
linux_kerneleq2.6.11
linux_kerneleq2.6.16.16
linux_kerneleq2.6.18.7
linux_kerneleq2.6.17.12
linux_kerneleq2.6.16.39
linux_kerneleq2.6.16.9
linux_kerneleq2.6.17.9
linux_kerneleq2.6.11.2
linux_kerneleq2.6.15.3
linux_kerneleq2.6.11.10

Name	Operator	Version
linux_kernel	eq	2.6.11
linux_kernel	eq	2.6.16.16
linux_kernel	eq	2.6.18.7
linux_kernel	eq	2.6.17.12
linux_kernel	eq	2.6.16.39
linux_kernel	eq	2.6.16.9
linux_kernel	eq	2.6.17.9
linux_kernel	eq	2.6.11.2
linux_kernel	eq	2.6.15.3
linux_kernel	eq	2.6.11.10