CVE-2007-2172

Published: Apr 22, 2007Modified: Apr 23, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.

Affected (19)

Products: Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.4.0 to 2.4.35
Linux Linux Kernel	From 2.6.0 to 2.6.20
Linux Linux Kernel	Version 2.6.21 git1
Linux Linux Kernel	Version 2.6.21 git2
Linux Linux Kernel	Version 2.6.21 git3
Linux Linux Kernel	Version 2.6.21 git4
Linux Linux Kernel	Version 2.6.21 git5
Linux Linux Kernel	Version 2.6.21 git6
Linux Linux Kernel	Version 2.6.21 git7
Linux Linux Kernel	Version 2.6.21 rc1
Linux Linux Kernel	Version 2.6.21 rc2
Linux Linux Kernel	Version 2.6.21 rc3
Linux Linux Kernel	Version 2.6.21 rc4
Linux Linux Kernel	Version 2.6.21 rc5

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (64)

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6

Source: cve@mitre.org

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2007-0488.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25068

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25288

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25392

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25838

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/26289

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/26450

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/26620

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/26647

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27913

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29058

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/33280

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2007/dsa-1356

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2007/dsa-1363

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2008/dsa-1503

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2008/dsa-1504

Source: cve@mitre.org

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35

Source: cve@mitre.org

Vendor Advisory

http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html

Source: cve@mitre.org

http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:171

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:216

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0347.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-1049.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0787.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/23447

Source: cve@mitre.org

PatchThird Party AdvisoryVDB EntryVendor Advisory

http://www.ubuntu.com/usn/usn-464-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2007/2690

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33979

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764

Source: cve@mitre.org

Third Party Advisory

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6