CVE-2007-3642

Published Jul 10, 2007 CVSS 2.0 · 7.8 High EPSS 3.9% KEV · Not listed
Description
The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service (crash) via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1356-1 New Linux 2.6.18 packages fix several vulnerabilities
EUVD EUVD EUVD-2007-3626 The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service (crash) via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference.
Ubuntu USN Ubuntu USN USN-510-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 2:21 PM
Reserved
Jul 9, 2007, 12:00 AM
Status
Modified
Published
Jul 10, 2007, 1:30 AM
Modified
Jun 16, 2026, 10:42 PM