CVE-2007-6282: Red Hat Enterprise Linux

High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days.

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.

Affected products

• Red Hat Enterprise Linux: version as_4 only; version es_4 only; version ws_4 only
• Red Hat Enterprise Linux Desktop: version 4 only

Published 2008-05-08. Last modified 2026-06-16.