[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195549

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-6282Date: (C)2008-05-07   (M)2023-12-22


The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.1
Exploit Score: 8.6
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
BID-29081
SECUNIA-30112
SECUNIA-30294
SECUNIA-30818
SECUNIA-30890
SECUNIA-30962
SECUNIA-31107
SECUNIA-31551
SECUNIA-31628
DSA-1630
RHSA-2008:0237
RHSA-2008:0275
RHSA-2008:0585
SUSE-SA:2008:030
SUSE-SA:2008:031
SUSE-SA:2008:032
USN-625-1
http://marc.info/?l=linux-netdev&m=120372380411259&w=2
https://bugzilla.redhat.com/show_bug.cgi?id=404291
linux-kernel-esp-dos(42276)
oval:org.mitre.oval:def:10549

CPE    1
cpe:/o:redhat:enterprise_linux_desktop:4
CWE    1
CWE-16
OVAL    1
oval:org.mitre.oval:def:8183

© SecPod Technologies