CVE-2007-1388

security flaw

Published Mar 10, 2007 CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Description
The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-1384 The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.
Ubuntu USN Ubuntu USN USN-464-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:50 PM
Reserved
Mar 10, 2007, 12:00 AM
Status
Modified
Published
Mar 10, 2007, 7:19 PM
Modified
Jun 16, 2026, 10:37 PM
Severity
Important
Public date
Mar 8, 2007, 12:00 AM