CVE-2007-5501

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference.

La función tcp_sacktag_write_queue en el archivo net/ipv4/tcp_input.c en el kernel de Linux versiones 2.6.21 hasta 2.6.23.7 ??y versiones 2.6.24-rc hasta 2.6.24-rc2, permite a atacantes remotos causar una denegación de servicio (bloqueo de aplicación) por medio de respuestas ACK diseñadas que desencadenan una desreferencia del puntero

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-10-17 CVE Reserved
2007-11-15 CVE Published
2024-08-07 CVE Updated
2024-10-26 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (24)

URL	Tag	Source
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=96a2d41a3e495734b63bff4e5dd0112741b93b38	X_refsource_confirm
http://lwn.net/Articles/258947	Mailing List
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc3	X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/38548	Vdb Entry
https://issues.rpath.com/browse/RPL-1965	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC
http://www.securityfocus.com/bid/26474	2023-02-13

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00002.html	2023-02-13
http://secunia.com/advisories/27664	2023-02-13
http://secunia.com/advisories/27703	2023-02-13
http://secunia.com/advisories/27888	2023-02-13
http://secunia.com/advisories/27919	2023-02-13
http://secunia.com/advisories/27922	2023-02-13
http://secunia.com/advisories/28170	2023-02-13
http://secunia.com/advisories/28706	2023-02-13
http://secunia.com/advisories/29245	2023-02-13
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.8	2023-02-13
http://www.mandriva.com/security/advisories?name=MDVSA-2008:044	2023-02-13
http://www.novell.com/linux/security/advisories/2007_63_kernel.html	2023-02-13
http://www.ubuntu.com/usn/usn-558-1	2023-02-13
http://www.ubuntu.com/usn/usn-574-1	2023-02-13
http://www.vupen.com/english/advisories/2007/3902	2023-02-13
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00032.html	2023-02-13
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00170.html	2023-02-13
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00302.html	2023-02-13

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21"		rc7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.21.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.21.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22"		rc7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.8 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.8"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.9 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.9"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.10 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.10"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.11 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.11"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.12 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.12"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.13 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.13"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.14 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.14"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.15 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.15"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.16 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.16"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.17 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.17"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.18 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.18"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.19 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.19"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.20 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.20"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.21 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.21"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.22.22 Search vendor "Linux" for product "Linux Kernel" and version "2.6.22.22"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc2		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc3		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc4		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc5		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc6		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc7		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc8		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"		rc9		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.1 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.1"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.2 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.2"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.3 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.3"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.4 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.4"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.5 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.5"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.6 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.6"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.23.7 Search vendor "Linux" for product "Linux Kernel" and version "2.6.23.7"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.24 Search vendor "Linux" for product "Linux Kernel" and version "2.6.24"		rc1		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				2.6.24 Search vendor "Linux" for product "Linux Kernel" and version "2.6.24"		rc2		Affected