NetSight
IP …
medium6.6Public exploit code

CVE-2007-1730

Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of service (oops) via a negative optlen value.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.6.20, 2.6.20.1, 2.6.20.2

References