CVE-2007-5904

Linux kernel <2.6.23 - Buffer Overflow

Title source: llm

Description

Multiple buffer overflows in CIFS VFS in Linux kernel 2.6.23 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function.

References (29)

... and 9 more

Scores

EPSS 0.0197
EPSS Percentile 83.3%

Classification

CWE
CWE-119
Status draft

Affected Products (1)

linux/linux_kernel < 2.6.23

Timeline

Published Nov 09, 2007
Tracked Since Feb 18, 2026