{ "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-1592", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "RHSA-2007:0436", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2007-0436.html" }, { "name": "DSA-1286", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2007/dsa-1286" }, { "name": "RHSA-2007:0347", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2007-0347.html" }, { "name": "[linux-netdev] 20070316 [PATCH 2.6.21-rc3] IPV6: ipv6_fl_socklist is inadvertently shared.", "refsource": "MLIST", "url": "http://marc.info/?l=linux-netdev&m=117406721731891&w=2" }, { "name": "USN-464-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-464-1" }, { "name": "SUSE-SA:2007:043", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2007_43_kernel.html" }, { "name": "MDKSA-2007:078", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:078" }, { "name": "RHSA-2007:0673", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2007-0673.html" }, { "name": "24777", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24777" }, { "name": "23104", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23104" }, { "name": "27528", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27528" }, { "name": "26379", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26379" }, { "name": "25226", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25226" }, { "name": "SUSE-SA:2007:029", "refsource": "SUSE", "url": "http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html" }, { "name": "24618", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24618" }, { "name": "25683", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25683" }, { "name": "ADV-2007-1084", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1084" }, { "name": "MDVSA-2011:051", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051" }, { "name": "25288", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25288" }, { "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478", "refsource": "MISC", "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478" }, { "name": "RHSA-2007:0672", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2007-0672.html" }, { "name": "RHBA-2007-0304", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHBA-2007-0304.html" }, { "name": "25099", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25099" }, { "name": "25961", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25961" }, { "name": "DSA-1503", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2008/dsa-1503" }, { "name": "25078", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25078" }, { "name": "25392", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25392" }, { "name": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4", "refsource": "CONFIRM", "url": "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.4" }, { "name": "SUSE-SA:2007:030", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2007_30_kernel.html" }, { "name": "29058", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/29058" }, { "name": "DSA-1304", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2007/dsa-1304" }, { "name": "25630", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25630" }, { "name": "25714", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25714" }, { "name": "kernel-tcpv6synrecvsoc-dos(33176)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33176" }, { "name": "SUSE-SA:2007:035", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2007_35_kernel.html" }, { "name": "oval:org.mitre.oval:def:10130", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10130" }, { "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299", "refsource": "CONFIRM", "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d35690beda1429544d46c8eb34b2e3a8c37ab299" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm" } ] } }