VULNERABILITY INTELLIGENCE
CVE-2007-1734
CVSS score7.2 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2007-03-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of the optlen value, which allows local users running on certain architectures to read kernel memory or cause a denial of service (oops), a related issue to CVE-2007-1730.