ID:10298 - Exploit for Integer overflow in Linux kernel - CVE-2007-1730

 
Main Vulnerability Database Exploits ID:10298 - Exploit for Integer overflow in Linux kernel - CVE-2007-1730

ID:10298 - Exploit for Integer overflow in Linux kernel - CVE-2007-1730

Published: August 2, 2024


Vulnerability identifier: #VU95260
Vulnerability risk: Low
CVE-ID: CVE-2007-1730
CWE-ID: CWE-190
Exploitation vector: Local access
Vulnerable software:
Linux kernel

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to read data or crash the application.

Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of service (oops) via a negative optlen value.


Remediation

Install update from vendor's repository.