PT-2007-2753 · Linux · Linux Kernel

Publicado 2007-04-11 · Atualizado 2011-03-08 · CVE-2007-1357

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.21 Linux kernel version 2.4.x

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending an AppleTalk frame that is shorter than the specified length. This triggers a BUG ON call when an attempt is made to perform a checksum.

Recommendations For Linux kernel versions prior to 2.6.21, update to version 2.6.21 or later to resolve the issue. For Linux kernel version 2.4.x, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-1357

DSA-1286-1

DSA-1304

Produtos afetados

Linux Kernel

Referências · 25

• 🔥 https://exploit-db.com/exploits/29826 · Exploit
• http://secunia.com/advisories/25691 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.5 · Nota
• http://novell.com/linux/security/advisories/2007_35_kernel.html · Aviso do Fabricante
• https://issues.rpath.com/browse/RPL-1244 · Nota
• http://securityfocus.com/archive/1/471457 · Nota
• http://secunia.com/advisories/25078 · Nota
• http://secunia.com/advisories/25961 · Nota
• http://secunia.com/advisories/25226 · Nota
• http://novell.com/linux/security/advisories/2007_30_kernel.html · Aviso do Fabricante
• http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html · Aviso do Fabricante
• http://secunia.com/advisories/24901 · Nota
• http://secunia.com/advisories/25683 · Nota
• http://secunia.com/advisories/25099 · Nota
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235857 · Nota