PT-2007-4896 · Linux · Linux Kernel

Zhongling Wen · Publicado 2007-07-10 · Atualizado 2012-10-31 · CVE-2007-3642

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.20.15 Linux kernel versions 2.6.21.x prior to 2.6.21.6 Linux kernel versions prior to 2.6.22

Description The issue allows remote attackers to cause a denial of service, resulting in a system crash. This is achieved by providing an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference in the decode choice function.

Recommendations For Linux kernel versions prior to 2.6.20.15, update to version 2.6.20.15 or later. For Linux kernel versions 2.6.21.x prior to 2.6.21.6, update to version 2.6.21.6 or later. For Linux kernel versions prior to 2.6.22, update to version 2.6.22 or later.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2007-3642

DSA-1356-1

Produtos afetados

Linux Kernel

Referências · 14

• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.6 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 · Nota
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.15 · Nota
• http://ubuntu.com/usn/usn-510-1 · Aviso do Fabricante
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25845b5155b55cd77e42655ec24161ba3feffa47 · Nota
• http://osvdb.org/37117 · Nota
• http://secunia.com/advisories/27212 · Aviso do Fabricante
• http://secunia.com/advisories/26450 · Aviso do Fabricante
• http://securityfocus.com/bid/24818 · Nota
• http://secunia.com/advisories/25955 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2466 · Aviso do Fabricante
• http://debian.org/security/2007/dsa-1356 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2007:195 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-3642 · Nota de Segurança