The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 7, 2007 |
| Suse | — | Upgrade kernel-bigsmpUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-xenpaeUpgrade kernel-iseries64Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-xen | Feb 17, 2015 | May 7, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-sparc64-smp | Nov 8, 2024 | May 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub