CVE-2007-4567 describes a denial-of-service vulnerability in the Linux kernel before version 2.6.22, specifically within the ipv6_hop_jumbo function, affecting systems processing IPv6 traffic. This critical vulnerability (CVSS 7.8) allows remote, unauthenticated attackers to trigger a kernel panic and system crash through a crafted IPv6 packet, due to improper validation of the hop-by-hop IPv6 extended header. While not actively exploited in the wild, an ExploitDB entry exists (EDB-30902), indicating public exploit code availability. Despite its age and high FAUCET Risk Score, there is no evidence of active exploitation, Metasploit/Nuclei modules, or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.6.21.7CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
2.2.27CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:* | ||
2.4.36CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:* | ||
2.4.36.1CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:* | ||
2.4.36.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.