CVE-2007-1734

Published: Mar 28, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of the optlen value, which allows local users running on certain architectures to read kernel memory or cause a denial of service (oops), a related issue to CVE-2007-1730.

Affected (3)

Products: Linux: Linux Kernel

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.20.1
Linux Linux Kernel	Version 2.6.20.2
Linux Linux Kernel	Version 2.6.20

References (10)

http://securityreason.com/securityalert/2511

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/463969/100/0/threaded

Source: cve@mitre.org

http://www.securitytracker.com/id?1017820

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33274

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43321

Source: cve@mitre.org

http://securityreason.com/securityalert/2511

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/463969/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017820

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/33274

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/43321

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.