CVE-2007-3731 : The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segme

The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step operations, which allows local users to cause a denial of service (NULL dereference and OOPS) via certain code that makes ptrace PTRACE_SETREGS and PTRACE_SINGLESTEP requests, related to the TRACE_IRQS_ON function, and possibly related to the arch_ptrace function.

Published 2007-09-17 17:17:00

Updated 2023-02-13 02:18:03

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2007-3731

Linux » Linux Kernel » Version: 2.6.20
cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 2.6.21
cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2007-3731

Top countries where our scanners detected CVE-2007-3731

Top open port discovered on systems with this issue 49152

IPs affected by CVE-2007-3731 36,596

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2007-3731!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2007-3731

EPSS FAQ

4.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3731

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2007-3731

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

Vendor statements for CVE-2007-3731

Red Hat 2007-10-18

This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.

References for CVE-2007-3731

Jump to