Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-4567

high · 7.8

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

7.8
CVSS
14.3%
EPSS (exploit prob.)
96th
EPSS percentile
2007-12-21
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 2.6.21.7
linuxlinux_kernel2.2.27
linuxlinux_kernel2.4.36
linuxlinux_kernel2.4.36.1
linuxlinux_kernel2.4.36.2
linuxlinux_kernel2.4.36.3
linuxlinux_kernel2.4.36.4
linuxlinux_kernel2.4.36.5
linuxlinux_kernel2.4.36.6
linuxlinux_kernel2.6
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.18
linuxlinux_kernel2.6.19.4
linuxlinux_kernel2.6.19.5
linuxlinux_kernel2.6.19.6
linuxlinux_kernel2.6.19.7
linuxlinux_kernel2.6.20.16
linuxlinux_kernel2.6.20.17
linuxlinux_kernel2.6.20.18
linuxlinux_kernel2.6.20.19
linuxlinux_kernel2.6.20.20
linuxlinux_kernel2.6.20.21
linuxlinux_kernel2.6.21.5
linuxlinux_kernel2.6.21.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-4567