AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-5501

HIGH · CVSS 7.8 EPSS 3.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-11-15 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2007-5501
Severity
HIGH
CVSS
7.8
EPSS
3.82%
Linux

Original NVD Description

The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference.