fib_semantics.c out of bounds access vulnerability

🗓️ 25 Jun 2007 17:50:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 4 Views

Out of bounds access in fib_semantics and dn_fib due to RTN_MAX used as array size instead of RTA_MAX in older Linux kernels.

Reporter	Title	Published	Views	Family All 181
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
bdu_fstec	Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	i686	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.i686.rpm
Red Hat Enterprise Linux	any	ia64	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.ia64.rpm
Red Hat Enterprise Linux	any	ppc64	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.ppc64.rpm
Red Hat Enterprise Linux	any	ppc64iseries	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.ppc64iseries.rpm
Red Hat Enterprise Linux	any	s390	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.s390.rpm
Red Hat Enterprise Linux	any	s390x	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.s390x.rpm
Red Hat Enterprise Linux	any	x86_64	kernel	2.6.9-55.0.2.EL	kernel-2.6.9-55.0.2.EL.x86_64.rpm
Red Hat Enterprise Linux	any	i686	kernel-debuginfo	2.6.9-55.0.2.EL	kernel-debuginfo-2.6.9-55.0.2.EL.i686.rpm
Red Hat Enterprise Linux	any	ia64	kernel-debuginfo	2.6.9-55.0.2.EL	kernel-debuginfo-2.6.9-55.0.2.EL.ia64.rpm
Red Hat Enterprise Linux	any	ppc64	kernel-debuginfo	2.6.9-55.0.2.EL	kernel-debuginfo-2.6.9-55.0.2.EL.ppc64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2007-2172
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-2172
cve	www.cve.org/CVERecord

25 Jun 2026 10:33Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.7

EPSS0.00431

Linux kernel array size bug dn_fib fib_semantics out of bounds