PT-2007-2430 · Linux+1 · Linux Kernel+1

Chris Wright · Publicado 2007-03-12 · Atualizado 2017-10-11 · CVE-2007-1000

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.20.2

Description: The issue allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference, specifically through the ipv6 getsockopt sticky function in net/ipv6/ipv6 sockglue.c.

Recommendations: For versions prior to 2.6.20.2, update to version 2.6.20.2 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-1000

RHSA-2007:0169

RHSA-2007_0169

Produtos afetados

Linux Kernel

Red Hat

Referências · 32

• 🔥 http://securityfocus.com/bid/22904 · Exploit
• 🔥 https://exploit-db.com/exploits/4172 · Exploit
• https://access.redhat.com/errata/RHSA-2007:0169 · Nota
• http://ubuntu.com/usn/usn-486-1 · Aviso do Fabricante
• http://osvdb.org/33025 · Nota
• https://access.redhat.com/security/cve/CVE-2007-1000 · Nota
• http://fedoranews.org/cms/node/2788 · Aviso do Fabricante
• http://secunia.com/advisories/24777 · Nota
• http://secunia.com/advisories/25080 · Nota
• http://kb.cert.org/vuls/id/920689 · Nota
• https://issues.rpath.com/browse/RPL-1153 · Nota
• http://secunia.com/advisories/26133 · Nota
• http://wslabi.com/wabisabilabi/initPublishedBid.do? · Nota
• http://secunia.com/advisories/25691 · Nota
• http://secunia.com/advisories/26139 · Nota