VULNERABILITY INTELLIGENCE
CVE-2007-6282
CVSS score7.1 NONE
EPSS probability2.45%
CISA KEVNot currently listed
Published2008-05-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:C
Description
The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.
Weakness classification
- nvd@nist.gov: CWE-16