CVE-2007-5242

HP OpenVMS < 8.3 - Denial of Service via Oversize Packet

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in (1) SYS$EI1000.EXE and (2) SYS$EI1000_MON.EXE in HP OpenVMS 8.3 and earlier allows remote attackers to cause a denial of service (machine crash) via an "oversize" packet, which is not properly discarded if "the device has no remaining buffers after receipt of the first buffer segment."

References (7)

Core 7
Core References
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25939
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27084
Patch mailing-list x_refsource_mlist
http://mail.openvms.org:8100/Lists/alerts/Message/583.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/37812
Patch mailing-list x_refsource_mlist
http://mail.openvms.org:8100/Lists/alerts/Message/582.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/37813
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3382

Scores

EPSS 0.0065
EPSS Percentile 71.1%

Details

Status published
Products (1)
hp/openvms < 8.3 (2 CPE variants)
Published Oct 06, 2007
Tracked Since Feb 18, 2026