PT-2007-3096 · Linux · Linux Kernel

Published 2007-03-28 · Updated 2018-10-16 · CVE-2007-1730

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.20 and later

Description: The issue is related to an integer signedness error in the DCCP support within the Linux kernel. This error occurs in the do dccp getsockopt function in net/dccp/proto.c, allowing local users to potentially read kernel memory or cause a denial of service. The exploitation is possible via a negative optlen value.

Recommendations: For Linux kernel versions 2.6.20 and later, consider applying a patch that fixes the integer signedness error in the do dccp getsockopt function to prevent potential exploitation. As a temporary workaround, restrict access to the do dccp getsockopt function to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-1730

Affected Products

Linux Kernel

References · 13

• 🔥 https://exploit-db.com/exploits/3595 · Exploit
• 🔥 https://exploit-db.com/exploits/3587 · Exploit
• http://ubuntu.com/usn/usn-464-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1730 · Security Note
• http://securityfocus.com/archive/1/463934/100/0/threaded · Note
• http://securityfocus.com/archive/1/464144/100/0/threaded · Note
• http://securitytracker.com/id?1017820 · Note
• http://marc.info/?l=dccp&m=117509584316267&w=2 · Note
• http://securityfocus.com/bid/23162 · Note
• http://secunia.com/advisories/25392 · Note
• http://vupen.com/english/advisories/2007/1143 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33274 · Note
• http://securityreason.com/securityalert/2482 · Note