CVE-2014-7207

NameCVE-2014-7207
DescriptionA certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-3060-1
NVD severitymedium (attack range: local)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)wheezy3.2.78-1fixed
wheezy (security)3.2.96-2fixed
jessie3.16.51-2fixed
jessie (security)3.16.43-2+deb8u5fixed
stretch4.9.65-3fixed
stretch (security)4.9.30-2+deb9u5fixed
buster4.13.13-1fixed
sid4.14.2-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsource(unstable)(not affected)
linuxsourcewheezy3.2.63-2+deb7u1mediumDSA-3060-1
linux-2.6source(unstable)(not affected)

Notes

- linux <not-affected> (Issue specific to 3.2.x)
In 3.2.x introduced with https://git.kernel.org/cgit/linux/kernel/git/bwh/linux-3.2.y.git/commit/?h=linux-3.2.y&id=64b5c251d5b2cee4a0f697bfb90d79263f6dd517
which is a backport of https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73f156a6e8c1074ac6327e0abd1169e95eb66463 (v3.16-rc1)
The missing commit for the 3.2.x branch was applied already earlier (before v3.16) mainline:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=916e4cf46d0204806c062c8c6c4d1f633852c5b6 (v3.14-rc6)
http://bugs.debian.org/766195
- linux-2.6 <not-affected> (Issue specific to 3.2.x)

Search for package or bug name: Reporting problems