Vulnerability Details : CVE-2007-0001
The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9 allows local users to cause a denial of service (kernel panic) by replacing a watched file, which does not cause the watch on the old inode to be dropped.
Vulnerability category: Denial of service
Products affected by CVE-2007-0001
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:linux_kernel_2.6.9:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2007-0001
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 8 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-0001
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.7
|
MEDIUM | AV:L/AC:M/Au:N/C:N/I:N/A:C |
3.4
|
6.9
|
NIST |
References for CVE-2007-0001
-
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=223129
Patch
-
http://www.securityfocus.com/bid/22737
-
http://www.securitytracker.com/id?1017705
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9560
-
http://www.redhat.com/support/errata/RHSA-2007-0085.html
Patch;Vendor Advisory
Jump to