The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds o…

Published 19 y ago 2007-03-28 · modified 4 mo ago 2026-06-16 · JSON

CVSS

7.2

v2.0 · NVD

CISA KEV

not known exploited

EPSS

0.8%

percentile 56%

Public exploits

Exploit-DB

The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of the optlen value, which allows local users running on certain architectures to read kernel memory or cause a denial of service (oops), a related issue to CVE-2007-1730.

Exploit prediction (EPSS)

0.77% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

Exploits and detections

EDB-3595 Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (2) · local · 2007-03-28
EDB-3587 Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (1) · local · 2007-03-27

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	7.2	`AV:L/AC:L/Au:N/C:C/I:C/A:C`

Classification

Technology feeds: Linux kernel (RSS, critical only)

References

exchange.xforce.ibmcloud.com /vulnerabilities/43321 · vdb-entry, x_refsource_XF, x_transferred
securityreason.com /securityalert/2511 · third-party-advisory, x_refsource_SREASON, x_transferred
securityfocus.com /archive/1/463969/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
securitytracker.com /id?1017820 · vdb-entry, x_refsource_SECTRACK, x_transferred
exchange.xforce.ibmcloud.com /vulnerabilities/33274 · vdb-entry, x_refsource_XF, x_transferred

Sources

CVE List: CVE-2007-1734
NVD: CVE-2007-1734

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.