CVE-2007-1730

2007-03-2810:19:00

mitre

web.nvd.nist.gov

cve-2007-1730

dccp

linux kernel

integer signedness error

denial of service

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:N/A:C

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

26.3%

JSON

Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of service (oops) via a negative optlen value.

Affected configurations

Nvd

Node

linuxlinux_kernelMatch2.6.20

linuxlinux_kernelMatch2.6.20.1

linuxlinux_kernelMatch2.6.20.2

VendorProductVersionCPE
linuxlinux_kernel2.6.20.1cpe:/o:linux:linux_kernel:2.6.20.1:::
linuxlinux_kernel2.6.20.2cpe:/o:linux:linux_kernel:2.6.20.2:::
linuxlinux_kernel2.6.20cpe:/o:linux:linux_kernel:2.6.20:::

Vendor	Product	Version	CPE
linux	linux_kernel	2.6.20.1	cpe:/o:linux:linux_kernel:2.6.20.1:::
linux	linux_kernel	2.6.20.2	cpe:/o:linux:linux_kernel:2.6.20.2:::
linux	linux_kernel	2.6.20	cpe:/o:linux:linux_kernel:2.6.20:::