CVE-2007-2172

2007-04-2200:00:00

ubuntu.com

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

30.3%

JSON

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes
RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an
“out of bound access” by the (1) dn_fib_props (dn_fib.c, DECNet) and (2)
fib_props (fib_semantics.c, IPv4) functions.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlinux-source-2.6.15< 2.6.15-29.58UNKNOWN
ubuntu6.10noarchlinux-source-2.6.17< 2.6.17.1-12.40UNKNOWN
ubuntu7.04noarchlinux-source-2.6.20< 2.6.20-16.31UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	linux-source-2.6.15	< 2.6.15-29.58	UNKNOWN
ubuntu	6.10	noarch	linux-source-2.6.17	< 2.6.17.1-12.40	UNKNOWN
ubuntu	7.04	noarch	linux-source-2.6.20	< 2.6.20-16.31	UNKNOWN