CVE-2007-0063

highpriority · attend · 47EPSS 0.204 · 97 %ileEUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

20.4% (97th) EPSS

CVSS 10 · high

Is it mine?

24 products

Check your exposure

Who says so?

3 sources

enisa_euvd · nvd · redhat_csaf

EPSS · scored 2026-10-22

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixeddhcp-1:2.0pl5-11.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970
Fixeddhcp-1:2.0pl5-11.i386 as a component of Red Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970
Fixeddhcp-1:2.0pl5-11.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970
Fixeddhcp-1:2.0pl5-11.ia64 as a component of Red Hat Linux Advanced Workstation 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970
Fixeddhcp-1:2.0pl5-11.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970
Fixeddhcp-1:2.0pl5-11.src as a component of Red Hat Enterprise Linux ES version 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970
Fixeddhcp-1:2.0pl5-11.src as a component of Red Hat Linux Advanced Workstation 2.1redhat_csaf
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
https://access.redhat.com/errata/RHSA-2007:0970

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10

v2.08.5highAV:N/AC:L/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-191USprimary

affected products (24)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
canonical ubuntu linux= 6.06nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 6.10nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 7.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
vmware ace1.0 → 1.0.3nvdUScpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*
vmware ace2.0 → 2.0.1nvdUScpe:2.3:a:vmware:ace:*:*:*:*:*:*:*:*
vmware esx= 2.0.2nvdUScpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*
vmware esx= 2.1.3nvdUScpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*
vmware esx= 2.5.3nvdUScpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*
vmware esx= 2.5.4nvdUScpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*
vmware esx= 3.0.0nvdUScpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*
vmware esx= 3.0.1nvdUScpe:2.3:o:vmware:esx:*:*:*:*:*:*:*:*
vmware player1.0 → 1.0.5nvdUScpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*
vmware player2.0 → 2.0.1nvdUScpe:2.3:a:vmware:player:*:*:*:*:*:*:*:*
vmware server1.0 → 1.0.4nvdUScpe:2.3:a:vmware:server:*:*:*:*:*:*:*:*
vmware workstation5.5 → 5.5.5nvdUScpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
vmware workstation6.0 → 6.0.1nvdUScpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*
dhcp-1:2.0pl5-11.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 all versionsfixedredhat_csafUS
dhcp-1:2.0pl5-11.i386 as a component of Red Hat Enterprise Linux ES version 2.1all versionsfixedredhat_csafUS
dhcp-1:2.0pl5-11.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 all versionsfixedredhat_csafUS

showing 20 of 24

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2007:0970Red Hat Security Advisory: dhcp security update2007-10-23csaf · redhat_csafUS
An updated dhcp package that corrects a security flaw is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team.

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

published 2007-09-21modified 2026-06-16

related (716)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-0185US	high8.4OT critical	25.2% (98th)	KEV	2022-02-11
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters…
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	2021-06-08
Windows NTFS Elevation of Privilege Vulnerability
CVE-2014-0497US	critical9.8OT critical	99.9% (100th)	KEV	2014-02-05
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote atta…
CVE-2019-12255US	critical9.8	75.1% (100th)	Exploit	2019-08-09
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
CVE-2017-14496US	high7.5	69.4% (99th)	Exploit	2017-10-03
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a…

+711 more

references (36)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan