CVE-2007-4567

Published: Dec 21, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

Affected (30)

Products: Linux: Linux Kernel

1 product

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.21.7
Linux Linux Kernel	Version 2.2.27
Linux Linux Kernel	Version 2.4.36.1
Linux Linux Kernel	Version 2.4.36.2
Linux Linux Kernel	Version 2.4.36.3
Linux Linux Kernel	Version 2.4.36.4
Linux Linux Kernel	Version 2.4.36.5
Linux Linux Kernel	Version 2.4.36.6
Linux Linux Kernel	Version 2.4.36
Linux Linux Kernel	Version 2.6.18
Linux Linux Kernel	Version 2.6.18 rc1
Linux Linux Kernel	Version 2.6.18 rc2
Linux Linux Kernel	Version 2.6.18 rc3
Linux Linux Kernel	Version 2.6.18 rc4
Linux Linux Kernel	Version 2.6.18 rc5
Linux Linux Kernel	Version 2.6.18 rc6
Linux Linux Kernel	Version 2.6.18 rc7
Linux Linux Kernel	Version 2.6.19.4
Linux Linux Kernel	Version 2.6.19.5
Linux Linux Kernel	Version 2.6.19.6
Linux Linux Kernel	Version 2.6.19.7
Linux Linux Kernel	Version 2.6.20.16
Linux Linux Kernel	Version 2.6.20.17
Linux Linux Kernel	Version 2.6.20.18
Linux Linux Kernel	Version 2.6.20.19
Linux Linux Kernel	Version 2.6.20.20
Linux Linux Kernel	Version 2.6.20.21
Linux Linux Kernel	Version 2.6.21.5
Linux Linux Kernel	Version 2.6.21.6
Linux Linux Kernel	Version 2.6

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://bugzilla.kernel.org/show_bug.cgi?id=8450

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6

Source: secalert@redhat.com

http://secunia.com/advisories/25505

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28170

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28706

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38015

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2010-0019.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2010-0053.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26943

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-574-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=548641

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/39171

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2010-0095.html

Source: secalert@redhat.com

https://usn.ubuntu.com/558-1/

Source: secalert@redhat.com

http://bugzilla.kernel.org/show_bug.cgi?id=8450

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25505

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28170

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28706

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38015

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2010-0019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2010-0053.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26943

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-574-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=548641

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/39171

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474

Source: af854a3a-2127-422b-91ae-364da2661108

https://rhn.redhat.com/errata/RHSA-2010-0095.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/558-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.