CVE-2007-6762
9.8
CRITICAL · CVSS 3.0 · EPSS 3% (pctl 87)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[] array.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.98% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2019-07-27 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| linux | linux kernel |
References
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2a2f11c227bdf292b3a2900ad04139d301b56ac4
- https://github.com/torvalds/linux/commit/2a2f11c227bdf292b3a2900ad04139d301b56ac4
- https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20
- https://support.f5.com/csp/article/K05342145
- https://support.f5.com/csp/article/K05342145?utm_source=f5support&%3Butm_medium=RSS
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2a2f11c227bdf292b3a2900ad04139d301b56ac4
- https://github.com/torvalds/linux/commit/2a2f11c227bdf292b3a2900ad04139d301b56ac4
- https://mirrors.edge.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20
- https://support.f5.com/csp/article/K05342145
- https://support.f5.com/csp/article/K05342145?utm_source=f5support&%3Butm_medium=RSS
→ the Explorer · watch your stack · NVD