The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-03-10T19:00:00

Updated: 2024-08-07T12:50:35.660Z

Reserved: 2007-03-10T00:00:00

Link: CVE-2007-1388

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-03-10T19:19:00.000

Modified: 2017-10-11T01:31:50.923

Link: CVE-2007-1388

cve-icon Redhat

Severity : Important

Publid Date: 2007-03-08T00:00:00Z

Links: CVE-2007-1388 - Bugzilla