Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2007-2172: Linux kernel < 2.6.21 may cause out‑of‑bounds access

CVE-2007-2172 · published 19 years ago

Summary

Older Linux kernel versions (2.6 before 2.6.21‑rc6 and 2.4 before 2.4.35) contain a coding mistake that can cause the system to read or write past the end of an internal list. This can lead to crashes or unexpected behavior in network functions. Upgrade to a newer kernel version or apply the distribution's security update to resolve the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
linux	linux_kernel	>= 2.4.0, < 2.4.35 >= 2.6.0, <= 2.6.20 2.6.21 `cpe:2.3:o:linux:linux_kernel::::::::`
debian	debian_linux	3.1 4.0 `cpe:2.3:o:debian:debian_linux:3.1:::::::*`
canonical	ubuntu_linux	6.06 6.10 7.04 `cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts:::`

Original advisory text

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn...

References

http://secunia.com/advisories/25068 Third Party Advisory
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6 Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2007-0488.html Third Party Advisory
http://secunia.com/advisories/25288 Third Party Advisory
http://secunia.com/advisories/25392 Third Party Advisory
http://secunia.com/advisories/25838 Third Party Advisory
http://secunia.com/advisories/26289 Third Party Advisory
http://secunia.com/advisories/26450 Third Party Advisory
http://secunia.com/advisories/26620 Third Party Advisory
http://secunia.com/advisories/26647 Third Party Advisory
http://secunia.com/advisories/27913 Third Party Advisory
http://secunia.com/advisories/29058 Third Party Advisory
http://secunia.com/advisories/33280 Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm Third Party Advisory
http://www.debian.org/security/2007/dsa-1356 Third Party Advisory
http://www.debian.org/security/2007/dsa-1363 Third Party Advisory
http://www.debian.org/security/2008/dsa-1503 Third Party Advisory
http://www.debian.org/security/2008/dsa-1504 Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35 Vendor Advisory
http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html
http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html
http://www.mandriva.com/security/advisories?name=MDKSA-2007:171 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:196 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0347.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1049.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0787.html Third Party Advisory
http://www.securityfocus.com/bid/23447 Patch Third Party Advisory VDB Entry Vendor Advisory
http://www.ubuntu.com/usn/usn-464-1 Third Party Advisory
http://www.vupen.com/english/advisories/2007/2690 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33979 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.7 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published22 Apr 2007

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2007-2172 · NVD

Track software like this

Free during beta