Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-1357

37
FAUCET Score

CVE-2007-1357 describes a denial-of-service vulnerability in the AppleTalk for Linux kernel (versions 2.6.x before 2.6.21, and possibly 2.4.x). A remote attacker can trigger a system crash by sending a malformed AppleTalk frame that is shorter than its specified length, leading to a BUG_ON call during checksum calculation. This vulnerability has a CVSS score of 7.8, indicating high severity with a network-based attack vector, low complexity, and a complete availability impact. While not actively exploited in the wild or on any hot lists, public exploit code exists (EDB-29826), though there is no evidence of widespread community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.6.20.4CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.8HIGH

AV:N/AC:L/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
13.53%
Probability of exploitation in next 30 days
EPSS Percentile
96.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-29826 · Apr 9, 2007
This CVE's current EPSS score of 0.1353 is in the 94th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

lists.suse.com / archive/suse-security-announce/2007-May/0001.html
bugzilla.redhat.com / bugzilla/show_bug.cgi
secunia.com / advisories/24793
Vendor Advisory
secunia.com / advisories/24901
secunia.com / advisories/25078
secunia.com / advisories/25099
secunia.com / advisories/25226
secunia.com / advisories/25392
secunia.com / advisories/25683
secunia.com / advisories/25691
secunia.com / advisories/25714
secunia.com / advisories/25961
issues.rpath.com / browse/RPL-1244
debian.org / security/2007/dsa-1286
debian.org / security/2007/dsa-1304
kernel.org / pub/linux/kernel/v2.6/ChangeLog-2.6.20.5
novell.com / linux/security/advisories/2007_30_kernel.html
novell.com / linux/security/advisories/2007_35_kernel.html
novell.com / linux/security/advisories/2007_43_kernel.html
securityfocus.com / archive/1/471457
securityfocus.com / bid/23376
Patch
ubuntu.com / usn/usn-464-1
vupen.com / english/advisories/2007/1340