CVE-2007-2172: Input Validation
A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTAMAX to be used as an array size instead of RTNMAX, which leads to an "out of bound access" by the (1) dnfibprops (dnfib.c, DECNet) and (2) fibprops (fibsemantics.c, IPv4) functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2172?
CVE-2007-2172 has been classified with a moderate severity due to potential out-of-bounds access vulnerabilities.
How do I fix CVE-2007-2172?
To mitigate CVE-2007-2172, upgrade your Linux kernel to version 2.6.21-rc6 or later.
Which Linux kernel versions are affected by CVE-2007-2172?
CVE-2007-2172 affects Linux kernel versions 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35.
What types of vulnerabilities are associated with CVE-2007-2172?
CVE-2007-2172 is associated with out-of-bound access vulnerabilities in DECNet and IPv4 functions.
Is CVE-2007-2172 exploitable remotely?
CVE-2007-2172 may potentially be exploited remotely under certain conditions, making it important to apply the necessary patches.