REDHAT-BUG-548641

First published: Fri Dec 18 2009(Updated: )

Originally discovered by Victor Julien that there is a way to crash the Linux kernel by sending a single IPv6 packet at it. 1) The <a href="https://access.redhat.com/security/cve/CVE-2007-4567">CVE-2007-4567</a> issue was reported to Red Hat in September 2007. Red Hat Enterprise Linux 5 was found not to be affected. 2) On December 18, 2009, a customer reported to us that Red Hat Enterprise Linux 5 was vulnerable to <a href="https://access.redhat.com/security/cve/CVE-2007-4567">CVE-2007-4567</a>. 3) Investigations showed that the issue was introduced in the RHBA-2008-0314 update on May 21, 2008 via a backport of a collection of patches for DoD IPv6 conformance. 4) Updates released on January 7, 2010 for Red Hat Enterprise Linux 5, resolving <a href="https://access.redhat.com/security/cve/CVE-2007-4567">CVE-2007-4567</a>. Note that the Linux kernels as shipped with Red Hat Enterprise Linux 3, 4, and Red Hat Enterprise MRG are not affected. Upstream commit: <a href="http://git.kernel.org/linus/e76b2b2567b83448c2ee85a896433b96150c92e6">http://git.kernel.org/linus/e76b2b2567b83448c2ee85a896433b96150c92e6</a> Reference: <a href="http://rhn.redhat.com/errata/RHBA-2008-0314.html">http://rhn.redhat.com/errata/RHBA-2008-0314.html</a> <a href="https://rhn.redhat.com/errata/RHSA-2010-0019.html">https://rhn.redhat.com/errata/RHSA-2010-0019.html</a>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/last-modified-date
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2007-4567
• agent/first-publish-date
• agent/source
• agent/references
• agent/severity
• agent/description
• agent/event
• agent/softwarecombine
• agent/tags
• agent/guess-ai
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• vendor/red hat
• canonical/red hat enterprise linux