CVE-2007-2172

Linux Kernel 2.4.0-2.4.34 and 2.6 < 2.6.21-rc6 - Out-of-Bounds Access in dn_fib_props and fib_props

Title source: llm
STIX 2.1

Description

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.

References (32)

Core 32
Core References
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-464-1
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-1049.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0347.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27913
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1363
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26289
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25838
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:171
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1504
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1356
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26647
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:216
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/33280
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25288
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26620
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33979
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:196
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25068
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1503
Third Party Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25392
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29058
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0787.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26450
Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23447
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2690
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2007-0488.html

Scores

EPSS 0.0043
EPSS Percentile 34.8%

Details

CWE
CWE-20
Status published
Products (7)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 6.10
canonical/ubuntu_linux 7.04
debian/debian_linux 3.1
debian/debian_linux 4.0
linux/linux_kernel 2.6.21 git1 (12 CPE variants)
linux/linux_kernel 2.4.0 - 2.4.35
Published Apr 22, 2007
Tracked Since Feb 18, 2026