NVD

Id
55036  
Name
CVE-2007-2876  
Description
The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
6.1  
Severity
Medium  
CVSS Base Score
6.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-06-11  
Modified Date
2012-10-30  
Seq
2007-2876  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279610 55036 CVE-2007-2876 [linux-kernel] 20070608 Linux 2.6.20.13  View
279611 55036 CVE-2007-2876 [linux-kernel] 20070608 Linux 2.6.21.4  View
279612 55036 CVE-2007-2876 oval:org.mitre.oval:def:10116  View
279613 55036 CVE-2007-2876 RHSA-2007:0488  View
279614 55036 CVE-2007-2876 http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm  View
279615 55036 CVE-2007-2876 DSA-1356  View
279616 55036 CVE-2007-2876 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4  View
279617 55036 CVE-2007-2876 MDKSA-2007:171  View
279618 55036 CVE-2007-2876 MDKSA-2007:196  View
279619 55036 CVE-2007-2876 SUSE-SA:2007:043  View
279620 55036 CVE-2007-2876 SUSE-SA:2007:051  View
279621 55036 CVE-2007-2876 SUSE-SA:2007:053  View
279622 55036 CVE-2007-2876 RHSA-2007:0705  View
279623 55036 CVE-2007-2876 24376  View
279624 55036 CVE-2007-2876 USN-486-1  View
279625 55036 CVE-2007-2876 USN-489-1  View
279626 55036 CVE-2007-2876 USN-510-1  View
279627 55036 CVE-2007-2876 ADV-2007-2105  View
279628 55036 CVE-2007-2876 kernel-sctpnew-dos(34777)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51810 JVNDB-2007-000473 Linux Kernel の Netfilter における SCTP コネクション追跡モジュールに Null ポインタデリファレンスの脆弱性 Linux Kernel の Netfilter で使用される SCTP コネクション追跡モジュール (ip_conntrack_proto_sctp.c, nf_conntrack_proto_sctp.c) で使用される sctp_new() 関数には、特定の無効な値が指定された SCTP パケットの処理により Null ポインタデリファレンスが発生する脆弱性が存在します。 CVE-2007-2876 26231 CVE-2007-2876 55036 6.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000473.html 2007-06-11 2007-09-25 View