CVE-2014-7207
4.9
Vector
AV:L/AC:L/Au:N/C:C/I:N/A:N
Exploitability: 3.9 / Impact: 6.9
Source: NVD
Description
A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access.
Affected (73)
Products: Linux: Linux Kernel
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.2.10 |
References (12)
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.