CVE-2007-4567
NoneCVSS
—
EPSS
14.3%
Published
Dec 21, 2007
CISA due date
—
The record
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | kernel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debuginfo-common | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-doc | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-headers | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::hypervisor | rhev-hypervisor | 0 | 0:5.4-2.1.8.el5_4rhev2_1 |
| Red Hat:enterprise_linux:5::hypervisor | rhev-hypervisor-pxe | 0 | 0:5.4-2.1.8.el5_4rhev2_1 |
| Red Hat:enterprise_linux:5::server | kernel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debuginfo-common | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-doc | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-headers | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen-debuginfo | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen-devel | 0 | 0:2.6.18-164.10.1.el5 |
| Red Hat:rhel_eus:5.2 | kernel | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-PAE | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-PAE-debuginfo | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-PAE-devel | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-debug | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-debug-debuginfo | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-debug-devel | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-debuginfo | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-debuginfo-common | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-devel | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-doc | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-headers | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-kdump | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-kdump-debuginfo | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-kdump-devel | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-xen | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-xen-debuginfo | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.2 | kernel-xen-devel | 0 | 0:2.6.18-92.1.35.el5 |
| Red Hat:rhel_eus:5.3 | kernel | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-PAE | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-PAE-debuginfo | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-PAE-devel | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-debug | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-debug-debuginfo | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-debug-devel | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-debuginfo | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-debuginfo-common | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-devel | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-doc | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-headers | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-kdump | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-kdump-debuginfo | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-kdump-devel | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-xen | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-xen-debuginfo | 0 | 0:2.6.18-128.12.1.el5 |
| Red Hat:rhel_eus:5.3 | kernel-xen-devel | 0 | 0:2.6.18-128.12.1.el5 |
Related vulnerabilities
- CVE-2016-5195 Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local… Also affects kernel
- CVE-2016-7117 Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux… Also affects kernel
- CVE-2016-1583 The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before… Also affects kernel
- CVE-2015-1805 The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel… Also affects kernel
- CVE-2014-8159 The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on… Also affects kernel
- CVE-2014-3917 kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled… Also affects kernel
- CVE-2013-2596 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel… Also affects kernel
- CVE-2012-0217 The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix… Also affects kernel