CVE-2007-1592
- State
- Published
- Severity
- Not scored
- Published
- Mar 22, 2007
- Updated
- Aug 7, 2024
- Reserved
- Mar 22, 2007
Description
net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2007:0436vendor-advisory
- DSA-1286vendor-advisory
- RHSA-2007:0347vendor-advisory
- [linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.mailing-list
- USN-464-1vendor-advisory
- SUSE-SA:2007:043vendor-advisory
- MDKSA-2007:078vendor-advisory
- RHSA-2007:0673vendor-advisory
- 24777third-party-advisory
- 23104vdb-entry
- 27528third-party-advisory
- 26379third-party-advisory
- 25226third-party-advisory
- SUSE-SA:2007:029vendor-advisory
- 24618third-party-advisory
- 25683third-party-advisory
- ADV-2007-1084vdb-entry
- MDVSA-2011:051vendor-advisory
- 25288third-party-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478
- RHSA-2007:0672vendor-advisory
- RHBA-2007-0304vendor-advisory
- 25099third-party-advisory
- 25961third-party-advisory
- DSA-1503vendor-advisory
- 25078third-party-advisory
- 25392third-party-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4
- SUSE-SA:2007:030vendor-advisory
- 29058third-party-advisory
- DSA-1304vendor-advisory
- 25630third-party-advisory
- 25714third-party-advisory
- kernel-tcpv6synrecvsoc-dos(33176)vdb-entry
- SUSE-SA:2007:035vendor-advisory
- oval:org.mitre.oval:def:10130vdb-entrysignature
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299
- http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.