Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1388
HistoryMar 10, 2007 - 12:00 a.m.

CVE-2007-1388

2007-03-1000:00:00
ubuntu.com
ubuntu.com
9

0.0004 Low

EPSS

Percentile

0.4%

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel
before 2.6.20, and possibly other versions, allows local users to cause a
denial of service (oops) by calling setsockopt with the IPV6_RTHDR option
name and possibly a zero option length or invalid option value, which
triggers a NULL pointer dereference.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-29.58UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.40UNKNOWN
ubuntu7.04noarchlinux-source-2.6.20< 2.6.20-16.31UNKNOWN