Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2007-3731
HistorySep 17, 2007 - 5:17 p.m.

CVE-2007-3731

2007-09-1717:17:00
CWE-20
redhat
web.nvd.nist.gov
55
linux
kernel
2.6.20
2.6.21
ptrace
single-step
denial of service
null dereference
nvd
cve-2007-3731

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6

Confidence

Low

EPSS

0

Percentile

10.1%

JSON

The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step operations, which allows local users to cause a denial of service (NULL dereference and OOPS) via certain code that makes ptrace PTRACE_SETREGS and PTRACE_SINGLESTEP requests, related to the TRACE_IRQS_ON function, and possibly related to the arch_ptrace function.

Affected configurations

Nvd
Node
linuxlinux_kernelMatch2.6.20
OR
linuxlinux_kernelMatch2.6.21
VendorProductVersionCPE
linuxlinux_kernel2.6.21cpe:/o:linux:linux_kernel:2.6.21:::
linuxlinux_kernel2.6.20cpe:/o:linux:linux_kernel:2.6.20:::

References

Related

seebug 1
veracode 1
ubuntucve 1
prion 1
cvelist 1
nvd 1
openvas 8
nessus 6
ubuntu 1
osv 2
debian 2
securityvulns 1
centos 1
redhat 1
oraclelinux 2
seebug
seebug
Linux Kernel PTraceη©ΊζŒ‡ι’ˆεΌ•η”¨ζœ¬εœ°ζ‹’η»ζœεŠ‘ζΌζ΄ž
2007-10-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:21:19
ubuntucve
ubuntucve
CVE-2007-3731
2007-09-17 00:00:00
prion
prion
Design/Logic Flaw
2007-09-17 17:17:00
cvelist
cvelist
CVE-2007-3731
2007-09-17 17:00:00
nvd
nvd
CVE-2007-3731
2007-09-17 17:17:00
openvas
openvas
Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-518-1)
2009-03-23 00:00:00
Debian Security Advisory DSA 1378-1 (linux-2.6)
2008-01-17 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20 vulnerabilities (USN-518-1)
2007-11-10 00:00:00
Debian DSA-1378-2 : linux-2.6 - several vulnerabilities
2007-10-03 00:00:00
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
ubuntu
ubuntu
linux-source-2.6.15, linux-source-2.6.17, linux-source-2.6.20 vulnerabilities
2007-09-25 00:00:00
osv
osv
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2007-09-28 00:00:00
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2007-09-28 00:00:00
debian
debian
[SECURITY] [DSA 1378-2] New Linux 2.6.18 packages fix several vulnerabilities
2007-09-28 23:07:49
[SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities
2007-09-27 21:33:05
securityvulns
securityvulns
[SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities
2007-09-28 00:00:00
centos
centos
kernel security update
2007-10-23 22:22:36
redhat
redhat
(RHSA-2007:0940) Important: kernel security update
2007-10-22 00:00:00
oraclelinux
oraclelinux
Important: kernel security update
2007-09-30 00:00:00
Important:kernel security update
2007-10-23 00:00:00

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6

Confidence

Low

EPSS

0

Percentile

10.1%

JSON
Related for CVE-2007-3731
seebug1veracode1ubuntucve1prion1cvelist1nvd1openvas8nessus6ubuntu1osv2debian2securityvulns1centos1redhat1oraclelinux2