Home > Vulnerability Database > CVE-2007-6762

WhiteSource Vulnerability Database

New vulnerability? Tell us about it!

CVE-2007-6762

Good to know:

Date: July 27, 2019

In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array.

Severity Score

7.3

Related Resources (5)

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-6762

Url: https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20

Url: https://github.com/torvalds/linux/commit/2a2f11c227bdf292b3a2900ad04139d301b56ac4

Url: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2a2f11c227bdf292b3a2900ad04139d301b56ac4

Url: https://support.f5.com/csp/article/K05342145

Severity Score

7.3

Weakness Type (CWE)

Buffer Errors

CWE-119

Top Fix

Upgrade Version

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us