CVE-2007-1217 — Kernel: CAPI overflow

Back Back to CVE browser

MEDIUM

Kernel: CAPI overflow

Published Mar 2, 2007

6.9

MEDIUM

CVSS 2.0

EPSS 0.38%

Description

Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local users to cause a denial of service (crash) and possibly gain privileges via a crafted CAPI packet.

Affected products

Red Hat Enterprise Linux 2.1

kernel-0:2.4.18-e.65

Fixed · RHSA-2007:0673
Red Hat Enterprise Linux 2.1

kernel-0:2.4.9-e.72

Fixed · RHSA-2007:0672
Red Hat Enterprise Linux 3

kernel-0:2.4.21-51.EL

Fixed · RHSA-2007:0671
Red Hat Enterprise Linux 4

kernel-0:2.6.9-55.0.6.EL

Fixed · RHSA-2007:0774
Red Hat Enterprise Linux 5

kernel-0:2.6.18-8.1.10.el5

Fixed · RHSA-2007:0705

Product	Package	State	Advisory
Red Hat Enterprise Linux 2.1	kernel-0:2.4.18-e.65	Fixed	RHSA-2007:0673
Red Hat Enterprise Linux 2.1	kernel-0:2.4.9-e.72	Fixed	RHSA-2007:0672
Red Hat Enterprise Linux 3	kernel-0:2.4.21-51.EL	Fixed	RHSA-2007:0671
Red Hat Enterprise Linux 4	kernel-0:2.6.9-55.0.6.EL	Fixed	RHSA-2007:0774
Red Hat Enterprise Linux 5	kernel-0:2.6.18-8.1.10.el5	Fixed	RHSA-2007:0705

Remediation

No remediation recorded yet.

Metrics

0.38% 0.00384

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00384

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.38% (0.00384)	30.04th	v5 (v2026.06.15)
Jun 15, 2026	0.37% (0.00372)	28.80th	v5 (v2026.06.15)
Mar 17, 2025	0.11% (0.00111)	27.12th	v4 (v2025.03.14)
Dec 12, 2024	2.32% (0.02320)	90.12th	v3 (v2023.03.01)
Apr 27, 2024	1.68% (0.01679)	87.52th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.31th	v3 (v2023.03.01)
Mar 6, 2023	1.55% (0.01547)	74.98th	v2 (v2022.01.01)
Feb 23, 2023	1.55% (0.01547)	74.94th	v2 (v2022.01.01)
Apr 1, 2022	1.55% (0.01547)	72.92th	v2 (v2022.01.01)
Feb 4, 2022	1.55% (0.01547)	51.82th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (24)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530
x_refsource_CONFIRM
http://bugzilla.kernel.org/show_bug.cgi?id=8028
x_refsource_CONFIRM
http://osvdb.org/34742
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/24777
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26379
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26478
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26709
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26760
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27528
third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200704-23.xml
vendor-advisoryx_refsource_GENTOO
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2007:078
vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2007-0671.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0672.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0673.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0705.html
vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0774.html
vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/23333
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1018539
vdb-entryx_refsource_SECTRACK
https://access.redhat.com/security/cve/CVE-2007-1217
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=402741
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2007-1217
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503
vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2007-1217

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530		x_refsource_CONFIRM
http://bugzilla.kernel.org/show_bug.cgi?id=8028		x_refsource_CONFIRM
http://osvdb.org/34742		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/24777		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26379		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26478		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26709		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26760		third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27528		third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200704-23.xml		vendor-advisoryx_refsource_GENTOO
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm		x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2007:078		vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2007-0671.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0672.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0673.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0705.html		vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2007-0774.html		vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/23333		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1018539		vdb-entryx_refsource_SECTRACK
https://access.redhat.com/security/cve/CVE-2007-1217		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=402741		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2007-1217
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503		vdb-entrysignaturex_refsource_OVAL
https://www.cve.org/CVERecord?id=CVE-2007-1217