PT-2008-1545 · Linux+1 · Linux Kernel+1

Published

2008-05-07

·

Updated

2017-09-29

·

CVE-2007-6282

CVSS v2.0

7.1

High

VectorAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.25
Description The issue allows remote routers to cause a denial of service, resulting in a crash, by sending a fragmented ESP packet where the first fragment does not contain the entire ESP header and IV.
Recommendations For Linux kernel versions prior to 2.6.25, update to version 2.6.25 or later to resolve the issue.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-6282
DSA-1630-1
RHSA-2008:0237
RHSA-2008:0275
RHSA-2008:0585
RHSA-2008_0237
RHSA-2008_0275

Affected Products

Linux Kernel
Red Hat