VDB
CVE-2007-1365
CVE-2007-1365
PUBLISHED
CVSS 10 CRITICAL
Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6 packets." NOTE: this was originally reported as a denial of service.
EPSS 43.40% · 97.6th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
43.40%
97.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openbsd | openbsd | 3.9, 4.0 |
| n/a | n/a | n/a |
Timeline
- Mar 10, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Aug 12, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Sep 20, 2023 EPSS Score
References
- http://securitytracker.com/id?1017735 url
- VU#986425 third-party-advisory
- [source-changes] 20070226 CVS: cvs.openbsd.org: src mailing-list
- http://www.coresecurity.com/?action=item&id=1703 url
- 33050 vdb
- [4.0] 010: SECURITY FIX: March 7, 2007 vendor-advisory
- 1017744 vdb
- [3.9] 020: SECURITY FIX: March 7, 2007 vendor-advisory
- 22901 vdb
- 24490 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2007-1365 advisory