7.2

CVE-2007-1734

The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of the optlen value, which allows local users running on certain architectures to read kernel memory or cause a denial of service (oops), a related issue to CVE-2007-1730.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version 2.6.20
Linux ≫ Linux Kernel Version 2.6.20.1
Linux ≫ Linux Kernel Version 2.6.20.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.73% 0.494
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id?1017820
https://exchange.xforce.ibmcloud.com/vulnerabilities/33274
http://securityreason.com/securityalert/2511
http://www.securityfocus.com/archive/1/463969/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/43321