CVE catalog

CVE-2007-2172

linux-2.6

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.43% · Oct 25, 2026

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions. fib_semantics.c out of bounds access vulnerability

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankernel-source-2.4.273.12.4.27-10vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge1vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge2vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge3vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge4vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge5vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge6vulnerable
Debiankernel-source-2.4.273.12.4.27-10sarge7fixed
Debianlinux-2.64.02.6.18.dfsg.1-12vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-12etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-12etch2vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankernel-source-2.4.27deb3.12.4.27-10sarge7Not reportedDSA-1503-2Not reported
Debianlinux-2.6deb4.02.6.18.dfsg.1-13etch2Not reportedDSA-1363-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]