The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-xen-devel | Dec 1, 2016 | Dec 20, 2007 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 21, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.20-16-server | Nov 8, 2024 | Dec 21, 2007 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Dec 21, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub