National Cyber Awareness System

Vulnerability Summary for CVE-2007-4997

Overview

Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an "off-by-two error."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23

Type: Patch Information

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23

External Source: XF

Name: kernel-ieee80211-dos(38247)

Hyperlink:http://xforce.iss.net/xforce/xfdb/38247

External Source: VUPEN

Name: ADV-2007-3718

Hyperlink:http://www.vupen.com/english/advisories/2007/3718

External Source: UBUNTU

Name: USN-574-1

Hyperlink:http://www.ubuntu.com/usn/usn-574-1

External Source: REDHAT

Name: RHSA-2007:1104

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1104.html

External Source: REDHAT

Name: RHSA-2007:0993

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0993.html

External Source: SUSE

Name: SUSE-SA:2007:059

Hyperlink:http://www.novell.com/linux/security/advisories/2007_59_kernel.html

External Source: MANDRIVA

Name: MDVSA-2008:008

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:008

External Source: MANDRIVA

Name: MDKSA-2007:232

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:232

External Source: MANDRIVA

Name: MDKSA-2007:226

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:226

External Source: DEBIAN

Name: DSA-1428

Hyperlink:http://www.debian.org/security/2007/dsa-1428

External Source: SECUNIA

Name: 28162

Hyperlink:http://secunia.com/advisories/28162

External Source: SECUNIA

Name: 28033

Hyperlink:http://secunia.com/advisories/28033

External Source: SECUNIA

Name: 27912

Hyperlink:http://secunia.com/advisories/27912

External Source: SECUNIA

Name: 27824

Hyperlink:http://secunia.com/advisories/27824

External Source: SECUNIA

Name: 27614

Hyperlink:http://secunia.com/advisories/27614

External Source: SECUNIA

Name: 27555

Hyperlink:http://secunia.com/advisories/27555

External Source: OVAL

Name: oval:org.mitre.oval:def:10596

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10596

External Source: SUSE

Name: SUSE-SA:2007:064

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html

External Source: MISC

Name: http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commitdiff;h=04045f98e0457aba7d4e6736f37eed189c48a5f7

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commitdiff;h=04045f98e0457aba7d4e6736f37eed189c48a5f7

External Source: CONFIRM

Name: ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/ChangeLog-2.6.16.57-rc1

Hyperlink:ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/ChangeLog-2.6.16.57-rc1

External Source: UBUNTU

Name: USN-578-1

Hyperlink:http://www.ubuntu.com/usn/usn-578-1

External Source: UBUNTU

Name: USN-558-1

Hyperlink:http://www.ubuntu.com/usn/usn-558-1

External Source: BID

Name: 26337

Hyperlink:http://www.securityfocus.com/bid/26337

External Source: MANDRIVA

Name: MDVSA-2008:105

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:105

External Source: SECUNIA

Name: 28971

Hyperlink:http://secunia.com/advisories/28971

External Source: SECUNIA

Name: 28806

Hyperlink:http://secunia.com/advisories/28806

External Source: SECUNIA

Name: 28706

Hyperlink:http://secunia.com/advisories/28706

External Source: SECUNIA

Name: 28170

Hyperlink:http://secunia.com/advisories/28170

External Source: SUSE

Name: SUSE-SA:2008:006

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10596

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10596