CVE-2007-4567

The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.

• CWE-20

• http://bugzilla.kernel.org/show_bug.cgi?id=8450
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6
• http://secunia.com/advisories/25505Vendor Advisory
• http://secunia.com/advisories/28170Vendor Advisory
• http://secunia.com/advisories/28706Vendor Advisory
• http://secunia.com/advisories/38015Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0019.html
• http://www.redhat.com/support/errata/RHSA-2010-0053.html
• http://www.securityfocus.com/bid/26943
• http://www.ubuntu.com/usn/usn-574-1
• https://bugzilla.redhat.com/show_bug.cgi?id=548641
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39171
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474
• https://rhn.redhat.com/errata/RHSA-2010-0095.html
• https://usn.ubuntu.com/558-1/
• http://bugzilla.kernel.org/show_bug.cgi?id=8450
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6
• http://secunia.com/advisories/25505Vendor Advisory
• http://secunia.com/advisories/28170Vendor Advisory
• http://secunia.com/advisories/28706Vendor Advisory
• http://secunia.com/advisories/38015Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0019.html
• http://www.redhat.com/support/errata/RHSA-2010-0053.html
• http://www.securityfocus.com/bid/26943
• http://www.ubuntu.com/usn/usn-574-1
• https://bugzilla.redhat.com/show_bug.cgi?id=548641
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39171
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11083
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474
• https://rhn.redhat.com/errata/RHSA-2010-0095.html
• https://usn.ubuntu.com/558-1/

Published

Dec 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4561Heap-based buffer overflow in the RTSP service in Helix DNA …
• CVE-2007-4562Unspecified vulnerability in Hitachi DABroker before 03-02-/…
• CVE-2007-4563Cosminexus Manager in Cosminexus Application Server 06-50 an…
• CVE-2007-4564Cosminexus Manager in Cosminexus Application Server 07-00 an…
• CVE-2007-4565sink.c in fetchmail before 6.3.9 allows context-dependent at…
• CVE-2007-4566Multiple buffer overflows in the login mechanism in sidvault…
• CVE-2007-4568Integer overflow in the build_range function in X.Org X Font…
• CVE-2007-4569backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when au…
• CVE-2007-4570Algorithmic complexity vulnerability in the MCS translation …
• CVE-2007-4571The snd_mem_proc_read function in sound/core/memalloc.c in t…
• CVE-2007-4572Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3…
• CVE-2007-4573The IA32 system call emulation functionality in Linux kernel…