CVE-2007-4567
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not...
7.8 HighPublic exploitFix available
CVE-2007-4567 is a high vulnerability (CVSS 7.8) in Linux Kernel, published December 21, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.3%, the 96th percentile. Fixed in kernel 0:2.6.18-164.10.1.el5.
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
Exploit likelihood
14.3%Up 1.8 points since Feb 4, 2022
What each source reports
NVD Score used
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
- Record
CVE-2007-4567- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
- Record
CVE-2007-4567- Updated
- 2026-11-02
EUVDEUVD-2007-4549 No score
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
- Record
EUVD-2007-4549- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5px-33wm-8jfx No score
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not...
The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
- Record
GHSA-v5px-33wm-8jfx- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernelRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server |
before 0:2.6.18-164.10.1.el5 | 0:2.6.18-164.10.1.el5 |
kernelRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-PAERed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-PAE-debuginfoRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-PAE-develRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-debugRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-debug-debuginfoRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-debug-develRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-debuginfoRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-debuginfo-commonRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-develRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-docRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-kdumpRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-kdump-debuginfoRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-kdump-develRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-xenRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-xen-debuginfoRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernel-xen-develRed Hat:rhel_eus:5.3 |
before 0:2.6.18-128.12.1.el5 | 0:2.6.18-128.12.1.el5 |
kernelRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-PAERed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-PAE-debuginfoRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-PAE-develRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-debugRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-debug-debuginfoRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-debug-develRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-debuginfoRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-debuginfo-commonRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-develRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-docRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-kdumpRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-kdump-debuginfoRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-kdump-develRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-xenRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-xen-debuginfoRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
kernel-xen-develRed Hat:rhel_eus:5.2 |
before 0:2.6.18-92.1.35.el5 | 0:2.6.18-92.1.35.el5 |
rhev-hypervisorRed Hat:enterprise_linux:5::hypervisor |
before 0:5.4-2.1.8.el5_4rhev2_1 | 0:5.4-2.1.8.el5_4rhev2_1 |
rhev-hypervisor-pxeRed Hat:enterprise_linux:5::hypervisor |
before 0:5.4-2.1.8.el5_4rhev2_1 | 0:5.4-2.1.8.el5_4rhev2_1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.6.22 - IPv6 Hop-By-Hop Header Remote Denial of Service | 2007-12-19 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/39171
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7474
bugzilla.kernel.org/show_bug.cgi?id=8450
secunia.com/advisories/28706
bugzilla.redhat.com/show_bug.cgi?id=548641
redhat.com/support/errata/RHSA-2010-0053.html
Show 90 moreShow less
securityfocus.com/bid/26943
usn.ubuntu.com/558-1
ubuntu.com/usn/usn-574-1
rhn.redhat.com/errata/RHSA-2010-0095.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6
nvd.nist.gov/vuln/detail/CVE-2007-4567
access.redhat.com/errata/RHSA-2010:0019
github.com/advisories/GHSA-v5px-33wm-8jfx
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0019.json
cve.org/CVERecord?id=CVE-2007-4567