NetSight
IP …
medium4.4Public exploit code

CVE-2007-1388

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.19.7
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.10, 2.6.11

Weakness classification

CWE-399

References