CVE-2007-6151

HIGH

Description

The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=eafe1aa37e6ec2d56f14732b5240c4dd09f0613a

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html

http://lists.vmware.com/pipermail/security-announce/2008/000023.html

http://rhn.redhat.com/errata/RHSA-2008-0055.html

http://secunia.com/advisories/28626

http://secunia.com/advisories/28706

http://secunia.com/advisories/28748

http://secunia.com/advisories/28889

http://secunia.com/advisories/28971

http://secunia.com/advisories/29058

http://secunia.com/advisories/29570

http://secunia.com/advisories/30110

http://secunia.com/advisories/30962

http://secunia.com/advisories/31246

http://secunia.com/advisories/33280

http://www.debian.org/security/2008/dsa-1479

http://www.debian.org/security/2008/dsa-1503

http://www.debian.org/security/2008/dsa-1504

http://www.mandriva.com/security/advisories?name=MDVSA-2008:086

http://www.mandriva.com/security/advisories?name=MDVSA-2008:112

http://www.redhat.com/support/errata/RHSA-2008-0211.html

http://www.redhat.com/support/errata/RHSA-2008-0787.html

http://www.securityfocus.com/bid/27497

http://www.ubuntu.com/usn/usn-574-1

http://www.ubuntu.com/usn/usn-578-1

http://www.vupen.com/english/advisories/2008/2222/references

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10971

Details

Source: MITRE

Published: 2007-12-15

Updated: 2017-09-29

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 3.9

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*

Tenable Plugins

View all (20 total)

IDNameProductFamilySeverity
67678Oracle Linux 3 : kernel (ELSA-2008-0211)NessusOracle Linux Local Security Checks
high
67641Oracle Linux 4 : kernel (ELSA-2008-0055)NessusOracle Linux Local Security Checks
high
60393Scientific Linux Security Update : kernel on SL3.x i386/x86_64NessusScientific Linux Local Security Checks
high
60354Scientific Linux Security Update : kernel on SL4.x i386/x86_64NessusScientific Linux Local Security Checks
high
59128SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5370)NessusSuSE Local Security Checks
high
40380VMSA-2008-0011 : Updated ESX service console packages for Samba and vmnixNessusVMware ESX Local Security Checks
high
36852Mandriva Linux Security Advisory : kernel (MDVSA-2008:112)NessusMandriva Local Security Checks
high
35323RHEL 2.1 : kernel (RHSA-2009:0001)NessusRed Hat Local Security Checks
high
33432SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5375)NessusSuSE Local Security Checks
high
32160RHEL 3 : kernel (RHSA-2008:0211)NessusRed Hat Local Security Checks
high
32139CentOS 3 : kernel (CESA-2008:0211)NessusCentOS Local Security Checks
high
31148Debian DSA-1504-1 : kernel-source-2.6.8 - several vulnerabilitiesNessusDebian Local Security Checks
high
31147Debian DSA-1503-1 : kernel-source-2.4.27 - several vulnerabilitiesNessusDebian Local Security Checks
high
31093Ubuntu 6.06 LTS : linux-source-2.6.15 vulnerabilities (USN-578-1)NessusUbuntu Local Security Checks
high
31090openSUSE 10 Security Update : kernel (kernel-4987)NessusSuSE Local Security Checks
high
30183Ubuntu 6.10 / 7.04 / 7.10 : linux-source-2.6.17/20/22 vulnerabilities (USN-574-1)NessusUbuntu Local Security Checks
high
30154CentOS 4 : kernel (CESA-2008:0055)NessusCentOS Local Security Checks
high
30140RHEL 4 : kernel (RHSA-2008:0055)NessusRed Hat Local Security Checks
high
30126Debian DSA-1479-1 : linux-2.6 - several vulnerabilitiesNessusDebian Local Security Checks
high
801444CentOS RHSA-2008-0055 Security CheckLog Correlation EngineGeneric
high