NetSight
IP …
medium4.9Public exploit code

CVE-2007-1861

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.20.8
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4

Weakness classification

CWE-399

References