CVE-2007-1365: Buffer Overflow
Published Mar 10, 2007
·Updated
Buffer overflow in kern/uipcmbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this was originally reported as a denial of service.
Affected Software
2 affected components
OpenBSD OpenBSD=3.9
OpenBSD OpenBSD=4.0
Remediation
Patch Available
Event History
Mar 10, 2007
CVE Published
09:19 PM
Mar 11, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1365?
CVE-2007-1365 is considered a critical vulnerability due to potential remote code execution capabilities.
2
How do I fix CVE-2007-1365?
To mitigate CVE-2007-1365, upgrade to OpenBSD versions 4.1 or later.
3
What types of attacks are possible due to CVE-2007-1365?
CVE-2007-1365 allows remote attackers to execute arbitrary code through malformed fragmented IPv6 packets.
4
Which versions of OpenBSD are affected by CVE-2007-1365?
CVE-2007-1365 affects OpenBSD versions 3.9 and 4.0.
5
What is the nature of the flaw described in CVE-2007-1365?
CVE-2007-1365 is a buffer overflow vulnerability caused by incorrect handling of mbuf in ICMP6 packets.