>> Linux Kernel "tcp_v6_syn_recv_soc()" IPv6 Sockets Local Denial of Service Vulnerability
Title : Linux Kernel "tcp_v6_syn_recv_soc()" IPv6 Sockets Local Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2007-1084 CVE ID : CVE-2007-1592
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2007-03-23
Technical Description
A vulnerability has been identified in Linux Kernel, which could be exploited by local attackers to cause a denial of service. This issue is due to an error in the "tcp_v6_syn_recv_soc()" [net/ipv6/tcp_ipv6.c] function where the IPv6 flow list (ipv6_fl_socklist) is shared with child sockets, which could be exploited by malicious users to crash an affected system by manipulating listening IPv6 TCP sockets.
