NVD

Id
57086  
Name
CVE-2007-4997  
Description
Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an "off-by-two error."  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-11-06  
Modified Date
2011-03-07  
Seq
2007-4997  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291450 57086 CVE-2007-4997 ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/ChangeLog-2.6.16.57-rc1  View
291451 57086 CVE-2007-4997 http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commitdiff;h=04045f98e0457aba7d4e6736f37eed189c48a5f7  View
291452 57086 CVE-2007-4997 SUSE-SA:2007:064  View
291453 57086 CVE-2007-4997 SUSE-SA:2008:006  View
291454 57086 CVE-2007-4997 oval:org.mitre.oval:def:10596  View
291455 57086 CVE-2007-4997 DSA-1428  View
291456 57086 CVE-2007-4997 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23  View
291457 57086 CVE-2007-4997 MDKSA-2007:226  View
291458 57086 CVE-2007-4997 MDKSA-2007:232  View
291459 57086 CVE-2007-4997 MDVSA-2008:008  View
291460 57086 CVE-2007-4997 MDVSA-2008:105  View
291461 57086 CVE-2007-4997 SUSE-SA:2007:059  View
291462 57086 CVE-2007-4997 RHSA-2007:0993  View
291463 57086 CVE-2007-4997 RHSA-2007:1104  View
291464 57086 CVE-2007-4997 26337  View
291465 57086 CVE-2007-4997 USN-558-1  View
291466 57086 CVE-2007-4997 USN-574-1  View
291467 57086 CVE-2007-4997 USN-578-1  View
291468 57086 CVE-2007-4997 ADV-2007-3718  View
291469 57086 CVE-2007-4997 kernel-ieee80211-dos(38247)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52317 JVNDB-2007-001007 Linux Kernel の net/ieee80211/ieee80211_rx.c における整数アンダーフローの脆弱性 Linux Kernel の net/ieee80211/ieee80211_rx.c には ieee80211_rx() 関数において、整数アンダーフローが発生する脆弱性が存在します。 CVE-2007-4997 28352 CVE-2007-4997 57086 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001007.html 2007-11-06 2008-10-30 View