CVE-2007-3843
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option...
4.3 Medium
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
Exploit likelihood
2.62%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
- Record
CVE-2007-3843- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
- Record
CVE-2007-3843- Updated
- 2026-11-02
EUVDEUVD-2007-3827 No score
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
- Record
EUVD-2007-3827- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xmg2-6455-627q No score
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option...
The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
- Record
GHSA-xmg2-6455-627q- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:4.0 From an advisory covering 5 CVEs |
before 2.6.18.dfsg.1-13etch2, plus listed versions 2.6.18.dfsg.1-122.6.18.dfsg.1-12etch12.6.18.dfsg.1-12etch22.6.18.dfsg.1-132.6.18.dfsg.1-13etch1 |
2.6.18.dfsg.1-13etch2 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-8.1.10.el5 | 0:2.6.18-8.1.10.el5 |
kernelRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernelRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernelRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernelRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-docRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugememRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-hugemem-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-largesmp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-smp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenURed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
kernel-xenU-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs |
before 0:2.6.9-55.0.12.EL | 0:2.6.9-55.0.12.EL |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3843 is a medium vulnerability (CVSS 4.3) in Linux Kernel, published August 9, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9670
secunia.com/advisories/27747
debian.org/security/2007/dsa-1363
kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1
redhat.com/support/errata/RHSA-2007-0939.html
Show 80 moreShow less
ubuntu.com/usn/usn-510-1
securityfocus.com/bid/25244
support.avaya.com/elmodocs2/security/ASA-2007-474.htm
lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595
nvd.nist.gov/vuln/detail/CVE-2007-3843
github.com/advisories/GHSA-xmg2-6455-627q
access.redhat.com/errata/RHSA-2007:0705
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0705.json
cve.org/CVERecord?id=CVE-2007-1217
kbase.redhat.com