CVE-2007-4567 Null dereference in n/a
Remote attackers can cause a kernel panic and denial of service via crafted IPv6 packets due to improper validation in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-4567?
CVE-2007-4567 is a high-severity vulnerability in Linux kernel, published on 21 Dec 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
Weakness: CWE-20
Which versions are affected by CVE-2007-4567?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2007-4567?
Upgrade to a fixed version.
Is CVE-2007-4567 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-4567 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-v5px-33wm-8jfx.