EUVD-2007-1384

Malware in sbrugna...

Linux setsockopt / getsockopt IPv6 DoS

IPV6RTHDR option with invalid value causes system crash...

Null pointer dereference

The doipv6setsockopt function in net/ipv6/ipv6sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service oops by calling setsockopt with the IPV6RTHDR option name and possibly a zero option length or invalid option value, which triggers ...

CVE-2007-1388: Undefined Security Weakness

The doipv6setsockopt function in net/ipv6/ipv6sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service oops by calling setsockopt with the IPV6RTHDR option name and possibly a zero option length or invalid option value, which triggers ...