CVE-2007-6282: High severity redhat Enterprise Linux Desktop vulnerability
Description of problem: We find out that various kernel versions (2.6.18-xxx) does crash with IPSec. This situation occurs with special clients (netscreen firewall, Cisco PIX) and can repoduced on various platforms. We have an example stacktrace here.
The bug is located in the kernel, not in the tools. We exchange the ipsec- tools, no change.
Version-Release number of selected component (if applicable): 2.6.18-x (all versions)
How reproducible: Very difficult, since it only occurs after some time (30min - 3 days) and only with netscreen firewalls or Cisco PIX.
Steps to Reproduce: 1. Using ipsec-tools and configure tunnels 2. wait... 3. Actual results:
Expected results:
Additional info:
I have also a compressed crashdump if anyone need (18 MB compressed...)
Other sources
The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2007-6282?
CVE-2007-6282 is classified as a denial of service vulnerability, potentially allowing a system crash.
How do I fix CVE-2007-6282?
To fix CVE-2007-6282, update the Linux kernel to version 2.6.25 or later.
Which Linux kernel versions are affected by CVE-2007-6282?
CVE-2007-6282 affects Linux kernel versions prior to 2.6.25.
What types of systems are vulnerable to CVE-2007-6282?
Red Hat Enterprise Linux versions AS 4, ES 4, WS 4, and the Red Hat Enterprise Linux Desktop version 4 are vulnerable to CVE-2007-6282.
Who can exploit CVE-2007-6282?
This vulnerability can be exploited by remote routers sending crafted fragmented ESP packets.