// For flags

CVE-2007-6063

Linux Kernel isdn_net_setcfg buffer overflow

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.

Desbordamiento de búfer en la función isdn_net_setcfg en isdn_net.c en Linux kernel 2.6.23 permite a usuarios loclaes tener un impacto desconocido a través de un argumento manipulado en la función isdn_ioctl.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-11-20 CVE Reserved
  • 2007-11-21 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-01-16 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (31)
URL Tag Source
http://bugzilla.kernel.org/show_bug.cgi?id=9416 X_refsource_confirm
http://secunia.com/advisories/27842 Third Party Advisory
http://secunia.com/advisories/27912 Third Party Advisory
http://secunia.com/advisories/28141 Third Party Advisory
http://secunia.com/advisories/28706 Third Party Advisory
http://secunia.com/advisories/28748 Third Party Advisory
http://secunia.com/advisories/28806 Third Party Advisory
http://secunia.com/advisories/28971 Third Party Advisory
http://secunia.com/advisories/29058 Third Party Advisory
http://secunia.com/advisories/29236 Third Party Advisory
http://secunia.com/advisories/33201 Third Party Advisory
http://secunia.com/advisories/33280 Third Party Advisory
http://www.securityfocus.com/bid/26605 Vdb Entry
http://www.vupen.com/english/advisories/2007/4046 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6514 Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9846 Signature
URL Date SRC
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html 2017-09-29
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html 2017-09-29
http://rhn.redhat.com/errata/RHSA-2008-0055.html 2017-09-29
http://www.debian.org/security/2007/dsa-1436 2017-09-29
http://www.debian.org/security/2008/dsa-1503 2017-09-29
http://www.debian.org/security/2008/dsa-1504 2017-09-29
http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 2017-09-29
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 2017-09-29
http://www.redhat.com/support/errata/RHSA-2008-0154.html 2017-09-29
http://www.redhat.com/support/errata/RHSA-2008-0787.html 2017-09-29
http://www.redhat.com/support/errata/RHSA-2008-0973.html 2017-09-29
http://www.ubuntu.com/usn/usn-574-1 2017-09-29
http://www.ubuntu.com/usn/usn-578-1 2017-09-29
https://access.redhat.com/security/cve/CVE-2007-6063 2009-01-08
https://bugzilla.redhat.com/show_bug.cgi?id=392101 2009-01-08
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.23
Search vendor "Linux" for product "Linux Kernel" and version "2.6.23"
-
Affected