CVE - CVE-2007-1592

CVE-ID
CVE-2007-1592	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MLIST:[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared. URL:http://marc.info/?l=linux-netdev&m=117406721731891&w=2 MISC:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm DEBIAN:DSA-1286 URL:http://www.debian.org/security/2007/dsa-1286 DEBIAN:DSA-1304 URL:http://www.debian.org/security/2007/dsa-1304 DEBIAN:DSA-1503 URL:http://www.debian.org/security/2008/dsa-1503 MANDRIVA:MDKSA-2007:078 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 MANDRIVA:MDVSA-2011:051 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 REDHAT:RHSA-2007:0347 URL:http://www.redhat.com/support/errata/RHSA-2007-0347.html REDHAT:RHSA-2007:0436 URL:http://rhn.redhat.com/errata/RHSA-2007-0436.html REDHAT:RHSA-2007:0673 URL:http://www.redhat.com/support/errata/RHSA-2007-0673.html REDHAT:RHSA-2007:0672 URL:http://www.redhat.com/support/errata/RHSA-2007-0672.html REDHAT:RHBA-2007-0304 URL:http://rhn.redhat.com/errata/RHBA-2007-0304.html SUSE:SUSE-SA:2007:029 URL:http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html SUSE:SUSE-SA:2007:030 URL:http://www.novell.com/linux/security/advisories/2007_30_kernel.html SUSE:SUSE-SA:2007:035 URL:http://www.novell.com/linux/security/advisories/2007_35_kernel.html SUSE:SUSE-SA:2007:043 URL:http://www.novell.com/linux/security/advisories/2007_43_kernel.html UBUNTU:USN-464-1 URL:http://www.ubuntu.com/usn/usn-464-1 BID:23104 URL:http://www.securityfocus.com/bid/23104 OVAL:oval:org.mitre.oval:def:10130 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130 VUPEN:ADV-2007-1084 URL:http://www.vupen.com/english/advisories/2007/1084 SECUNIA:24618 URL:http://secunia.com/advisories/24618 SECUNIA:24777 URL:http://secunia.com/advisories/24777 SECUNIA:25078 URL:http://secunia.com/advisories/25078 SECUNIA:25099 URL:http://secunia.com/advisories/25099 SECUNIA:25288 URL:http://secunia.com/advisories/25288 SECUNIA:25392 URL:http://secunia.com/advisories/25392 SECUNIA:25630 URL:http://secunia.com/advisories/25630 SECUNIA:25683 URL:http://secunia.com/advisories/25683 SECUNIA:25714 URL:http://secunia.com/advisories/25714 SECUNIA:25961 URL:http://secunia.com/advisories/25961 SECUNIA:26379 URL:http://secunia.com/advisories/26379 SECUNIA:25226 URL:http://secunia.com/advisories/25226 SECUNIA:27528 URL:http://secunia.com/advisories/27528 SECUNIA:29058 URL:http://secunia.com/advisories/29058 XF:kernel-tcpv6synrecvsoc-dos(33176) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/33176
Assigning CNA
N/A
Date Entry Created
20070322	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070322)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.