Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-4567
HistoryDec 21, 2007 - 12:00 a.m.

CVE-2007-4567

2007-12-2100:00:00
ubuntu.com
ubuntu.com
10

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.07 Low

EPSS

Percentile

93.9%

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel
before 2.6.22 does not properly validate the hop-by-hop IPv6 extended
header, which allows remote attackers to cause a denial of service (NULL
pointer dereference and kernel panic) via a crafted IPv6 packet.

Notes

Author Note
kees introduced in 2.6.20, fixed in 2.6.22
OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchlinux-source-2.6.20< 2.6.20-16.33UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.07 Low

EPSS

Percentile

93.9%