nf}_conntrack_sctp: remotely triggerable NULL ptr dereference

🗓️ 25 Jun 2007 17:50:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 2 Views

Attackers can trigger a NULL pointer dereference in SCTP connection tracking, causing denial of service.

Reporter	Title	Published	Views	Family All 164
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i686	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.i686.rpm
Red Hat Enterprise Linux	4	ia64	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.ppc64.rpm
Red Hat Enterprise Linux	4	ppc64iseries	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.ppc64iseries.rpm
Red Hat Enterprise Linux	4	s390	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.s390.rpm
Red Hat Enterprise Linux	4	s390x	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	kernel	0:2.6.9-55.0.2.EL	kernel-0:2.6.9-55.0.2.EL.x86_64.rpm
Red Hat Enterprise Linux	4	i686	kernel-debuginfo	0:2.6.9-55.0.2.EL	kernel-debuginfo-0:2.6.9-55.0.2.EL.i686.rpm
Red Hat Enterprise Linux	4	ia64	kernel-debuginfo	0:2.6.9-55.0.2.EL	kernel-debuginfo-0:2.6.9-55.0.2.EL.ia64.rpm
Red Hat Enterprise Linux	4	ppc64	kernel-debuginfo	0:2.6.9-55.0.2.EL	kernel-debuginfo-0:2.6.9-55.0.2.EL.ppc64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2007-2876
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-2876
cve	www.cve.org/CVERecord

21 Nov 2025 17:31Current

5.9Medium risk

Vulners AI Score5.9

CVSS 26.1

EPSS0.02674

connection tracking null pointer denial service linux kernel remote trigger