CVE-2007-6063

Published: Nov 21, 2007Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.23

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (58)

http://bugzilla.kernel.org/show_bug.cgi?id=9416

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2008-0055.html

Source: cve@mitre.org

http://secunia.com/advisories/27842

Source: cve@mitre.org

http://secunia.com/advisories/27912

Source: cve@mitre.org

http://secunia.com/advisories/28141

Source: cve@mitre.org

http://secunia.com/advisories/28706

Source: cve@mitre.org

http://secunia.com/advisories/28748

Source: cve@mitre.org

http://secunia.com/advisories/28806

Source: cve@mitre.org

http://secunia.com/advisories/28971

Source: cve@mitre.org

http://secunia.com/advisories/29058

Source: cve@mitre.org

http://secunia.com/advisories/29236

Source: cve@mitre.org

http://secunia.com/advisories/33201

Source: cve@mitre.org

http://secunia.com/advisories/33280

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1436

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1503

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1504

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:008

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:112

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0154.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0787.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0973.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/26605

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-574-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-578-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4046

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846

Source: cve@mitre.org

http://bugzilla.kernel.org/show_bug.cgi?id=9416