CVE-2007-5966

Published: Dec 20, 2007Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information.

Affected (11)

Products: Linux: Linux Kernel

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.23.1
Linux Linux Kernel	Version 2.6.23.2
Linux Linux Kernel	Version 2.6.23.3
Linux Linux Kernel	Version 2.6.23.4
Linux Linux Kernel	Version 2.6.23.5
Linux Linux Kernel	Version 2.6.23.6
Linux Linux Kernel	Version 2.6.23.7
Linux Linux Kernel	Version 2.6.23.9
Linux Linux Kernel	Version 2.6.23
Linux Linux Kernel	Version 2.6.23 rc1
Linux Linux Kernel	Version 2.6.23 rc2

Related CWEs

References (48)

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

Source: secalert@redhat.com

http://secunia.com/advisories/28088

Source: secalert@redhat.com

http://secunia.com/advisories/28105

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28141

Source: secalert@redhat.com

http://secunia.com/advisories/28706

Source: secalert@redhat.com

http://secunia.com/advisories/28806

Source: secalert@redhat.com

http://secunia.com/advisories/31628

Source: secalert@redhat.com

http://secunia.com/advisories/36131

Source: secalert@redhat.com

http://secunia.com/advisories/37471

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1436

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:112

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0585.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-1193.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/485282/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26880

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-574-1

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4225

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/3316

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2038

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10774

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8125

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28088

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28105

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28141

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28706

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28806

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31628

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36131

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37471

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1436

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:112

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0585.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1193.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/485282/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/507985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26880

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/usn-574-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2009-0016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/4225

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3316

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-2038

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10774

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8125

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.