What’s Vulnerable › Vulnerabilities

CVE-2007-6282

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-05-08 · updated 2026-06-16
• Weakness: CWE-16

Description

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.

Affected products

• Red Hat Enterprise Linux: as_4, es_4, ws_4
• RedHat Enterprise Linux Desktop: 4

References

• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html
• http://marc.info/?l=linux-netdev&m=120372380411259&w=2
• http://secunia.com/advisories/30112
• http://secunia.com/advisories/30294
• http://secunia.com/advisories/30818
• http://secunia.com/advisories/30890
• http://secunia.com/advisories/30962
• http://secunia.com/advisories/31107
• http://secunia.com/advisories/31551
• http://secunia.com/advisories/31628

Get alerted when CVE-2007-6282 or the next vulnerability affects your stack