CVE-2007-3642 — The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service (crash) via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference

Back Back to CVE browser

HIGH

The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service (crash) via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference

Published Jul 10, 2007

7.8

HIGH

CVSS 2.0

EPSS 3.87%

Description

The decode_choice function in net/netfilter/nf_conntrack_h323_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and before 2.6.22 allows remote attackers to cause a denial of service (crash) via an encoded, out-of-range index value for a choice field, which triggers a NULL pointer dereference.

Affected products

Remediation

Red Hat statement

Not vulnerable. These issues did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.

Metrics

3.87% 0.03872

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03872

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (16 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.87% (0.03872)	89.88th	v5 (v2026.06.15)
Jun 15, 2026	3.87% (0.03872)	88.81th	v5 (v2026.06.15)
Mar 17, 2025	1.91% (0.01913)	82.09th	v4 (v2025.03.14)
Dec 17, 2024	27.13% (0.27134)	96.78th	v3 (v2023.03.01)
Dec 2, 2024	11.55% (0.11548)	95.47th	v3 (v2023.03.01)
Sep 4, 2024	8.50% (0.08498)	94.56th	v3 (v2023.03.01)
Jun 20, 2024	6.93% (0.06929)	93.96th	v3 (v2023.03.01)
May 13, 2024	6.30% (0.06304)	93.57th	v3 (v2023.03.01)
Apr 5, 2024	8.41% (0.08412)	94.30th	v3 (v2023.03.01)
Feb 27, 2024	8.14% (0.08136)	94.12th	v3 (v2023.03.01)
Dec 11, 2023	8.28% (0.08284)	93.72th	v3 (v2023.03.01)
Nov 8, 2023	8.19% (0.08191)	93.67th	v3 (v2023.03.01)
Mar 7, 2023	8.26% (0.08257)	93.32th	v3 (v2023.03.01)
Mar 6, 2023	3.78% (0.03779)	85.48th	v2 (v2022.01.01)
Apr 1, 2022	3.78% (0.03779)	84.01th	v2 (v2022.01.01)
Feb 4, 2022	3.78% (0.03779)	67.21th	v2 (v2022.01.01)

Weaknesses (1)

CWE-189

References (16)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25845b5155b55cd77e42655ec24161ba3feffa47
x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.15
x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.6
x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22
x_refsource_CONFIRM
http://osvdb.org/37117
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/25955
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/26450
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/27212
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.debian.org/security/2007/dsa-1356
vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDKSA-2007:195
vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/24818
vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/usn-510-1
vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2007/2466
vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2007-3642
Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2007-3642
https://www.cve.org/CVERecord?id=CVE-2007-3642

Link	Providers	Tags
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=25845b5155b55cd77e42655ec24161ba3feffa47		x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.15		x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.6		x_refsource_CONFIRM
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22		x_refsource_CONFIRM
http://osvdb.org/37117		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/25955		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/26450		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/27212		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.debian.org/security/2007/dsa-1356		vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDKSA-2007:195		vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/24818		vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/usn-510-1		vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2007/2466		vdb-entryx_refsource_VUPENVendor Advisory
https://access.redhat.com/security/cve/CVE-2007-3642		Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2007-3642
https://www.cve.org/CVERecord?id=CVE-2007-3642

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 10, 2007

Updated Aug 7, 2024

Reserved Jul 9, 2007

Link CVE-2007-3642

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-3642

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-3642