Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-2172 Details

Description

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6	CVE	Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2007-0488.html	CVE	Third Party Advisory
http://secunia.com/advisories/25068	CVE	Third Party Advisory
http://secunia.com/advisories/25288	CVE	Third Party Advisory
http://secunia.com/advisories/25392	CVE	Third Party Advisory
http://secunia.com/advisories/25838	CVE	Third Party Advisory
http://secunia.com/advisories/26289	CVE	Third Party Advisory
http://secunia.com/advisories/26450	CVE	Third Party Advisory
http://secunia.com/advisories/26620	CVE	Third Party Advisory
http://secunia.com/advisories/26647	CVE	Third Party Advisory
http://secunia.com/advisories/27913	CVE	Third Party Advisory
http://secunia.com/advisories/29058	CVE	Third Party Advisory
http://secunia.com/advisories/33280	CVE	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33979	CVE	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764	CVE	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm	CVE	Third Party Advisory
http://www.debian.org/security/2007/dsa-1356	CVE	Third Party Advisory
http://www.debian.org/security/2007/dsa-1363	CVE	Third Party Advisory
http://www.debian.org/security/2008/dsa-1503	CVE	Third Party Advisory
http://www.debian.org/security/2008/dsa-1504	CVE	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35	CVE	Vendor Advisory
http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html	CVE
http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:171	CVE	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:196	CVE	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:216	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0347.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1049.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0787.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/23447	CVE	PatchThird Party AdvisoryVDB EntryVendor Advisory
http://www.ubuntu.com/usn/usn-464-1	CVE	Third Party Advisory
http://www.vupen.com/english/advisories/2007/2690	CVE	Third Party Advisory
http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6	[email protected]	Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2007-0488.html	[email protected]	Third Party Advisory
http://secunia.com/advisories/25068	[email protected]	Third Party Advisory
http://secunia.com/advisories/25288	[email protected]	Third Party Advisory
http://secunia.com/advisories/25392	[email protected]	Third Party Advisory
http://secunia.com/advisories/25838	[email protected]	Third Party Advisory
http://secunia.com/advisories/26289	[email protected]	Third Party Advisory
http://secunia.com/advisories/26450	[email protected]	Third Party Advisory
http://secunia.com/advisories/26620	[email protected]	Third Party Advisory
http://secunia.com/advisories/26647	[email protected]	Third Party Advisory
http://secunia.com/advisories/27913	[email protected]	Third Party Advisory
http://secunia.com/advisories/29058	[email protected]	Third Party Advisory
http://secunia.com/advisories/33280	[email protected]	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33979	[email protected]	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10764	[email protected]	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm	[email protected]	Third Party Advisory
http://www.debian.org/security/2007/dsa-1356	[email protected]	Third Party Advisory
http://www.debian.org/security/2007/dsa-1363	[email protected]	Third Party Advisory
http://www.debian.org/security/2008/dsa-1503	[email protected]	Third Party Advisory
http://www.debian.org/security/2008/dsa-1504	[email protected]	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.35	[email protected]	Vendor Advisory
http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08269.html	[email protected]
http://www.mail-archive.com/git-commits-head%40vger.kernel.org/msg08270.html	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2007:171	[email protected]	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:196	[email protected]	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:216	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0347.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1049.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0787.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/23447	[email protected]	PatchThird Party AdvisoryVDB EntryVendor Advisory
http://www.ubuntu.com/usn/usn-464-1	[email protected]	Third Party Advisory
http://www.vupen.com/english/advisories/2007/2690	[email protected]	Third Party Advisory

see all 64 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 2.4.0, < 2.4.35 >= 2.6.0, <= 2.6.20 2.6.21 git1 2.6.21 git2 2.6.21 git3
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git1:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git2:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git3:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git4:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git5:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git6:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:git7:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:rc1:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:rc2:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:rc3:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:rc4:::::: cpe:2.3:o:linux:linux_kernel:2.6.21:rc5:::::: Remediation No remediation found in references.
debian debian linux	3.1 4.0
CPE cpe:2.3:o:debian:debian_linux:3.1:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::* Remediation No remediation found in references.
canonical ubuntu linux	6.06 6.10 7.04
CPE cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts::: cpe:2.3:o:canonical:ubuntu_linux:6.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.04:::::::* Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Oct 19, 2018	Modified Analysis	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Apr 23, 2007	Initial Analysis	[email protected]

CVE-2007-2172 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO