PT-2019-6494

CVE-2007-6762

·

Published

2019-07-27

·

Updated

2019-09-27

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.20
Description The issue is related to an off-by-one bug in the net/netlabel/netlabel cipso v4.c file of the Linux kernel, which can cause an overflow of the doi def->tags[] array.
Recommendations For Linux kernel versions prior to 2.6.20, update to version 2.6.20 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2007-6762
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com