What’s Vulnerable › Vulnerabilities

CVE-2007-2172

• Severity: medium (CVSS 4.7 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-04-22 · updated 2026-06-16
• Weakness: CWE-20

Description

A typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as an array size instead of RTN_MAX, which leads to an "out of bound access" by the (1) dn_fib_props (dn_fib.c, DECNet) and (2) fib_props (fib_semantics.c, IPv4) functions.

Affected products

• Canonical Ubuntu Linux: 6.06, 6.10, 7.04
• Debian Linux: 3.1, 4.0
• Linux kernel: from 2.4.0 before 2.4.35; from 2.6.0 through 2.6.20; 2.6.21-git1, 2.6.21-git2, 2.6.21-git3, 2.6.21-git4, 2.6.21-git5, 2.6.21-git6 (+6) — fixed in 2.4.35

How to fix

Upgrade to a fixed version: Linux kernel 2.4.35. Check the vendor advisory for mitigations.

References

• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc6
• http://rhn.redhat.com/errata/RHSA-2007-0488.html
• http://secunia.com/advisories/25068
• http://secunia.com/advisories/25288
• http://secunia.com/advisories/25392
• http://secunia.com/advisories/25838
• http://secunia.com/advisories/26289
• http://secunia.com/advisories/26450
• http://secunia.com/advisories/26620
• http://secunia.com/advisories/26647
• http://secunia.com/advisories/27913
• http://secunia.com/advisories/29058

Get alerted when CVE-2007-2172 or the next vulnerability affects your stack