CVE-2007-1357

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-11 · updated 2026-06-16

Description

The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk frame that is shorter than the specified length, which triggers a BUG_ON call when an attempt is made to perform a checksum.

Affected products

Linux kernel: through 2.6.20.4

References

http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html
http://secunia.com/advisories/24793
http://secunia.com/advisories/24901
http://secunia.com/advisories/25078
http://secunia.com/advisories/25099
http://secunia.com/advisories/25226
http://secunia.com/advisories/25392
http://secunia.com/advisories/25683
http://secunia.com/advisories/25691
http://secunia.com/advisories/25714
http://secunia.com/advisories/25961
http://www.debian.org/security/2007/dsa-1286

Get alerted when CVE-2007-1357 or the next vulnerability affects your stack