PT-2007-6106 · Linux+1 · Linux Kernel+1

Chris Evans · Published 2007-11-06 · Updated 2023-02-13 · CVE-2007-4997

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.23

Description The issue is caused by an integer underflow in the ieee80211 rx function, allowing remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211 STYPE QOS DATA flag is set. This is due to an "off-by-two error".

Recommendations For Linux kernel versions prior to 2.6.23, update to version 2.6.23 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2007-4997

DSA-1428-1

RHSA-2007:0993

RHSA-2007:1104

RHSA-2007_0993

RHSA-2007_1104

Affected Products

Linux Kernel

Red Hat

References · 408

• https://bdu.fstec.ru/vul/2015-03801 · Security Note
• https://bdu.fstec.ru/vul/2015-03833 · Security Note
• https://bdu.fstec.ru/vul/2015-03817 · Security Note
• https://bdu.fstec.ru/vul/2015-03986 · Security Note
• https://bdu.fstec.ru/vul/2015-03856 · Security Note
• https://bdu.fstec.ru/vul/2015-03771 · Security Note
• https://bdu.fstec.ru/vul/2015-02387 · Security Note
• https://bdu.fstec.ru/vul/2015-03770 · Security Note
• https://bdu.fstec.ru/vul/2015-03758 · Security Note
• https://bdu.fstec.ru/vul/2015-03831 · Security Note
• https://bdu.fstec.ru/vul/2015-03900 · Security Note
• https://bdu.fstec.ru/vul/2015-04011 · Security Note
• https://bdu.fstec.ru/vul/2015-00978 · Security Note
• https://bdu.fstec.ru/vul/2015-03880 · Security Note
• https://bdu.fstec.ru/vul/2015-04221 · Security Note