CVE - CVE-2007-5501

CVE-ID
CVE-2007-5501	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:26474 URL:http://www.securityfocus.com/bid/26474 MISC:27664 URL:http://secunia.com/advisories/27664 MISC:27703 URL:http://secunia.com/advisories/27703 MISC:27888 URL:http://secunia.com/advisories/27888 MISC:27919 URL:http://secunia.com/advisories/27919 MISC:27922 URL:http://secunia.com/advisories/27922 MISC:28170 URL:http://secunia.com/advisories/28170 MISC:28706 URL:http://secunia.com/advisories/28706 MISC:29245 URL:http://secunia.com/advisories/29245 MISC:ADV-2007-3902 URL:~~http://www.vupen.com/english/advisories/2007/3902~~ (Obsolete source) MISC:FEDORA-2007-3751 URL:https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html MISC:FEDORA-2007-3837 URL:https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html MISC:FEDORA-2007-759 URL:https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html MISC:MDVSA-2008:044 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:044~~ (Obsolete source) MISC:SUSE-SA:2007:063 URL:http://www.novell.com/linux/security/advisories/2007_63_kernel.html MISC:SUSE-SA:2008:013 URL:http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html MISC:USN-558-1 URL:http://www.ubuntu.com/usn/usn-558-1 MISC:USN-574-1 URL:http://www.ubuntu.com/usn/usn-574-1 MISC:[linux-kernel] 20071116 Linux 2.6.23.8 URL:http://lwn.net/Articles/258947/ MISC:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=96a2d41a3e495734b63bff4e5dd0112741b93b38 URL:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=96a2d41a3e495734b63bff4e5dd0112741b93b38 MISC:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 URL:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8 MISC:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc3 URL:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc3 MISC:https://issues.rpath.com/browse/RPL-1965 URL:https://issues.rpath.com/browse/RPL-1965 MISC:linux-kernel-tcpsacktagwritequeue-dos(38548) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/38548
Assigning CNA
Red Hat, Inc.
Date Record Created
20071017	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20071017)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.