CVE-2007-1388

Published Mar 10, 2007

Last updated 7 years ago

Overview

Description
The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
4.4
Impact score
6.9
Exploitability score
2.7
Vector string
AV:L/AC:M/Au:S/C:N/I:N/A:C

Weaknesses

nvd@nist.gov
CWE-399

Configurations