CVE-2007-1357
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x,...
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum.
Exploit likelihood
What each source reports
NVD Score used
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum.
- Record
CVE-2007-1357- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum.
- Record
CVE-2007-1357- Updated
- 2026-11-02
EUVDEUVD-2007-1354 No score
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum.
- Record
EUVD-2007-1354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7wpj-xm3v-6m5h No score
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x,...
The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum.
- Record
GHSA-7wpj-xm3v-6m5h- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 From an advisory covering 4 CVEs |
before 2.6.18.dfsg.1-12etch1, plus listed versions 2.6.18.dfsg.1-12 |
2.6.18.dfsg.1-12etch1 |
kernel-source-2.6.8Debian:3.1 From an advisory covering 14 CVEs |
before 2.6.8-16sarge7, plus listed versions 2.6.8-162.6.8-16sarge12.6.8-16sarge22.6.8-16sarge32.6.8-16sarge42.6.8-16sarge52.6.8-16sarge6 |
2.6.8-16sarge7 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.x - AppleTalk ATalk_Sum_SKB Function Denial of Service | 2007-04-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1357 is a high vulnerability (CVSS 7.8) in Linux Kernel, published April 11, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.9%, the 96th percentile. No source names a fixed version.
References
debian.org/security/2007/dsa-1286
vupen.com/english/advisories/2007/1340
ubuntu.com/usn/usn-464-1
novell.com/linux/security/advisories/2007_43_kernel.html
secunia.com/advisories/24901
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235857
Show 19 moreShow less
securityfocus.com/bid/23376
issues.rpath.com/browse/RPL-1244
lists.suse.com/archive/suse-security-announce/2007-May/0001.html
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.5
nvd.nist.gov/vuln/detail/CVE-2007-1357
github.com/advisories/GHSA-7wpj-xm3v-6m5h