CVE-2007-4567

Linux Kernel 2.6.22 - IPv6 Hop-By-Hop Header Remote Denial of Service

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

La función ipv6_hop_jumbo en el archivo net/ipv6/exthdrs.c en el kernel de Linux versiones anteriores a 2.6.22, no comprueba apropiadamente el encabezado extendido de IPv6 salto a salto, lo que permite a los atacantes remotos causar una denegación de servicio (desreferencia del puntero NULL y pánico del kernel) por medio de un paquete IPv6 especialmente diseñado.

ESXi update for ntp and ESX Console OS (COS) updates for COS kernel, openssl, krb5, gcc, bind, gzip, sudo.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-08-28 CVE Reserved
2007-12-19 First Exploit
2007-12-20 CVE Published
2024-08-07 CVE Updated
2025-05-15 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (18)

URL	Tag	Source
http://bugzilla.kernel.org/show_bug.cgi?id=8450	X_refsource_confirm
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6	X_refsource_confirm
http://www.securityfocus.com/bid/26943	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39171	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/30902	2007-12-19

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/25505	2023-02-13
http://secunia.com/advisories/28170	2023-02-13
http://secunia.com/advisories/28706	2023-02-13
http://secunia.com/advisories/38015	2023-02-13
http://www.redhat.com/support/errata/RHSA-2010-0019.html	2023-02-13
http://www.redhat.com/support/errata/RHSA-2010-0053.html	2023-02-13
http://www.ubuntu.com/usn/usn-574-1	2023-02-13
https://bugzilla.redhat.com/show_bug.cgi?id=548641	2010-02-09
https://rhn.redhat.com/errata/RHSA-2010-0095.html	2023-02-13
https://usn.ubuntu.com/558-1	2023-02-13
https://access.redhat.com/security/cve/CVE-2007-4567	2010-02-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				<= 2.6.21.7 Search vendor "Linux" for product "Linux Kernel" and version " <= 2.6.21.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.2.27 Search vendor "Linux" for product "Linux Kernel" and version "2.2.27"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36.1 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36.2 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36.3 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36.4 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36.5 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.4.36.6 Search vendor "Linux" for product "Linux Kernel" and version "2.4.36.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.18"		rc7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.19.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.19.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.19.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.19.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.19.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.19.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.19.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.19.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.20.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.16"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.20.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.17"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.20.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.18"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.20.19 Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.19"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.20.20 Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.20"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.20.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.20.21"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.6"		-		Affected