CVE-2007-1730
Linux Kernel 2.6.20 and later - Denial of Service via Negative optlen in DCCP getsockopt
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-1730.
AI-analyzed exploit summary This exploit targets a kernel memory disclosure vulnerability in the DCCP implementation of the Linux kernel. It uses a crafted getsockopt call to leak kernel memory contents to user space.
Description
Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of service (oops) via a negative optlen value.
Exploits (2)
This exploit targets a kernel memory disclosure vulnerability in the DCCP implementation of the Linux kernel. It uses a crafted getsockopt call to leak kernel memory contents to user space.
The exploit demonstrates a memory disclosure vulnerability in the Linux kernel's DCCP implementation (CVE-2007-1730) by leveraging a signedness issue in the `do_dccp_getsockopt` function, allowing local users to read kernel memory. The PoC creates a socket, triggers the flaw with a negative length value, and dumps the leaked memory content.