CVE Feed

    Dashboard / CVE / CVE-2007-5938

    CVE-2007-5938

    The iwl_set_rate function in compatible/iwl3945-base.c in iwlwifi 1.1.21 and earlier dereferences an iwl_get_hw_mode return value without checking for NULL, which might allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors during module initialization.

    Published:Nov 20, 2007
    Last Modified:Apr 23, 2026
    EPS:Dec 6, 2007
    EPSS Score:0.01423
    CVSS Score:5

    Affected Products

    Vendor
    Intel
    Product
    Pro Wireless 3945abg
    Vendor
    Intel
    Product
    Wireless Wifi Link 4965agn
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://bugs.gentoo.org/show_bug.cgi?id=199209http://bugs.gentoo.org/show_bug.cgi?id=199209

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://article.gmane.org/gmane.linux.drivers.ipw3945.devel/1618
    http://bugs.gentoo.org/show_bug.cgi?id=199209
    http://osvdb.org/44749
    http://secunia.com/advisories/29236
    http://www.intellinuxwireless.org/repos/?p=iwlwifi.git%3Ba=commitdiff%3Bh=25db44d4cdfe31d59223d74cb577f4a71aff1a40
    http://www.redhat.com/support/errata/RHSA-2008-0154.html
    http://www.securityfocus.com/bid/26842
    http://www.vupen.com/english/advisories/2007/4211
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10787
    http://article.gmane.org/gmane.linux.drivers.ipw3945.devel/1618
    http://bugs.gentoo.org/show_bug.cgi?id=199209
    http://osvdb.org/44749
    http://secunia.com/advisories/29236
    http://www.intellinuxwireless.org/repos/?p=iwlwifi.git%3Ba=commitdiff%3Bh=25db44d4cdfe31d59223d74cb577f4a71aff1a40
    http://www.redhat.com/support/errata/RHSA-2008-0154.html
    http://www.securityfocus.com/bid/26842
    http://www.vupen.com/english/advisories/2007/4211
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10787

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High