10

CVE-2008-1673

The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
DebianDebian Linux Version4.0
DebianDebian Linux Version4.0 Editionalpha
DebianDebian Linux Version4.0 Editionamd64
DebianDebian Linux Version4.0 Editionarm
DebianDebian Linux Version4.0 Editionhppa
DebianDebian Linux Version4.0 Editionia-32
DebianDebian Linux Version4.0 Editionia-64
DebianDebian Linux Version4.0 Editionm68k
DebianDebian Linux Version4.0 Editionmips
DebianDebian Linux Version4.0 Editionmipsel
DebianDebian Linux Version4.0 Editionpowerpc
DebianDebian Linux Version4.0 Editions-390
DebianDebian Linux Version4.0 Editionsparc
LinuxLinux Kernel Version2.4.0
LinuxLinux Kernel Version2.4.0 Updatetest1
LinuxLinux Kernel Version2.4.0 Updatetest10
LinuxLinux Kernel Version2.4.0 Updatetest11
LinuxLinux Kernel Version2.4.0 Updatetest12
LinuxLinux Kernel Version2.4.0 Updatetest2
LinuxLinux Kernel Version2.4.0 Updatetest3
LinuxLinux Kernel Version2.4.0 Updatetest4
LinuxLinux Kernel Version2.4.0 Updatetest5
LinuxLinux Kernel Version2.4.0 Updatetest6
LinuxLinux Kernel Version2.4.0 Updatetest7
LinuxLinux Kernel Version2.4.0 Updatetest8
LinuxLinux Kernel Version2.4.0 Updatetest9
LinuxLinux Kernel Version2.4.1
LinuxLinux Kernel Version2.4.2
LinuxLinux Kernel Version2.4.3
LinuxLinux Kernel Version2.4.4
LinuxLinux Kernel Version2.4.5
LinuxLinux Kernel Version2.4.6
LinuxLinux Kernel Version2.4.7
LinuxLinux Kernel Version2.4.8
LinuxLinux Kernel Version2.4.9
LinuxLinux Kernel Version2.4.10
LinuxLinux Kernel Version2.4.11
LinuxLinux Kernel Version2.4.12
LinuxLinux Kernel Version2.4.13
LinuxLinux Kernel Version2.4.14
LinuxLinux Kernel Version2.4.15
LinuxLinux Kernel Version2.4.16
LinuxLinux Kernel Version2.4.17
LinuxLinux Kernel Version2.4.18
LinuxLinux Kernel Version2.4.18 Updatepre1
LinuxLinux Kernel Version2.4.18 Updatepre2
LinuxLinux Kernel Version2.4.18 Updatepre3
LinuxLinux Kernel Version2.4.18 Updatepre4
LinuxLinux Kernel Version2.4.18 Updatepre5
LinuxLinux Kernel Version2.4.18 Updatepre6
LinuxLinux Kernel Version2.4.18 Updatepre7
LinuxLinux Kernel Version2.4.18 Updatepre8
LinuxLinux Kernel Version2.4.19
LinuxLinux Kernel Version2.4.19 Updatepre1
LinuxLinux Kernel Version2.4.19 Updatepre2
LinuxLinux Kernel Version2.4.19 Updatepre3
LinuxLinux Kernel Version2.4.19 Updatepre4
LinuxLinux Kernel Version2.4.19 Updatepre5
LinuxLinux Kernel Version2.4.19 Updatepre6
LinuxLinux Kernel Version2.4.20
LinuxLinux Kernel Version2.4.21
LinuxLinux Kernel Version2.4.21 Updatepre1
LinuxLinux Kernel Version2.4.21 Updatepre4
LinuxLinux Kernel Version2.4.21 Updatepre7
LinuxLinux Kernel Version2.4.22
LinuxLinux Kernel Version2.4.23
LinuxLinux Kernel Version2.4.23 Updatepre9
LinuxLinux Kernel Version2.4.23_ow2
LinuxLinux Kernel Version2.4.24
LinuxLinux Kernel Version2.4.24_ow1
LinuxLinux Kernel Version2.4.25
LinuxLinux Kernel Version2.4.26
LinuxLinux Kernel Version2.4.27
LinuxLinux Kernel Version2.4.27 Updatepre1
LinuxLinux Kernel Version2.4.27 Updatepre2
LinuxLinux Kernel Version2.4.27 Updatepre3
LinuxLinux Kernel Version2.4.27 Updatepre4
LinuxLinux Kernel Version2.4.27 Updatepre5
LinuxLinux Kernel Version2.4.28
LinuxLinux Kernel Version2.4.29
LinuxLinux Kernel Version2.4.29 Updaterc1
LinuxLinux Kernel Version2.4.29 Updaterc2
LinuxLinux Kernel Version2.4.30
LinuxLinux Kernel Version2.4.30 Updaterc2
LinuxLinux Kernel Version2.4.30 Updaterc3
LinuxLinux Kernel Version2.4.31
LinuxLinux Kernel Version2.4.31 Updatepre1
LinuxLinux Kernel Version2.4.32
LinuxLinux Kernel Version2.4.32 Updatepre1
LinuxLinux Kernel Version2.4.32 Updatepre2
LinuxLinux Kernel Version2.4.33
LinuxLinux Kernel Version2.4.33 Updatepre1
LinuxLinux Kernel Version2.4.33.2
LinuxLinux Kernel Version2.4.33.3
LinuxLinux Kernel Version2.4.33.4
LinuxLinux Kernel Version2.4.33.5
LinuxLinux Kernel Version2.4.34
LinuxLinux Kernel Version2.4.35
LinuxLinux Kernel Version2.4.36
LinuxLinux Kernel Version2.4.36.1
LinuxLinux Kernel Version2.4.36.2
LinuxLinux Kernel Version2.4.36.3
LinuxLinux Kernel Version2.4.36.4
LinuxLinux Kernel Version2.4.36.5
LinuxLinux Kernel Version2.6.0
LinuxLinux Kernel Version2.6.0 Updatetest1
LinuxLinux Kernel Version2.6.0 Updatetest2
LinuxLinux Kernel Version2.6.0 Updatetest3
LinuxLinux Kernel Version2.6.0 Updatetest4
LinuxLinux Kernel Version2.6.0 Updatetest5
LinuxLinux Kernel Version2.6.0 Updatetest6
LinuxLinux Kernel Version2.6.0 Updatetest7
LinuxLinux Kernel Version2.6.0 Updatetest8
LinuxLinux Kernel Version2.6.0 Updatetest9
LinuxLinux Kernel Version2.6.1
LinuxLinux Kernel Version2.6.1 Updaterc1
LinuxLinux Kernel Version2.6.1 Updaterc2
LinuxLinux Kernel Version2.6.2
LinuxLinux Kernel Version2.6.10
LinuxLinux Kernel Version2.6.10 Updaterc2
LinuxLinux Kernel Version2.6.11
LinuxLinux Kernel Version2.6.11 Updaterc2
LinuxLinux Kernel Version2.6.11 Updaterc3
LinuxLinux Kernel Version2.6.11 Updaterc4
LinuxLinux Kernel Version2.6.11.4
LinuxLinux Kernel Version2.6.11.5
LinuxLinux Kernel Version2.6.11.6
LinuxLinux Kernel Version2.6.11.7
LinuxLinux Kernel Version2.6.11.8
LinuxLinux Kernel Version2.6.11.11
LinuxLinux Kernel Version2.6.11.12
LinuxLinux Kernel Version2.6.12
LinuxLinux Kernel Version2.6.12 Updaterc1
LinuxLinux Kernel Version2.6.12 Updaterc4
LinuxLinux Kernel Version2.6.12 Updaterc5
LinuxLinux Kernel Version2.6.12.1
LinuxLinux Kernel Version2.6.12.2
LinuxLinux Kernel Version2.6.12.3
LinuxLinux Kernel Version2.6.12.4
LinuxLinux Kernel Version2.6.12.5
LinuxLinux Kernel Version2.6.12.6
LinuxLinux Kernel Version2.6.12.12
LinuxLinux Kernel Version2.6.12.22
LinuxLinux Kernel Version2.6.13
LinuxLinux Kernel Version2.6.13 Updaterc1
LinuxLinux Kernel Version2.6.13 Updaterc4
LinuxLinux Kernel Version2.6.13 Updaterc6
LinuxLinux Kernel Version2.6.13 Updaterc7
LinuxLinux Kernel Version2.6.13.1
LinuxLinux Kernel Version2.6.13.2
LinuxLinux Kernel Version2.6.13.3
LinuxLinux Kernel Version2.6.13.4
LinuxLinux Kernel Version2.6.14
LinuxLinux Kernel Version2.6.14 Updaterc1
LinuxLinux Kernel Version2.6.14 Updaterc2
LinuxLinux Kernel Version2.6.14 Updaterc3
LinuxLinux Kernel Version2.6.14 Updaterc4
LinuxLinux Kernel Version2.6.14.1
LinuxLinux Kernel Version2.6.14.2
LinuxLinux Kernel Version2.6.14.3
LinuxLinux Kernel Version2.6.14.4
LinuxLinux Kernel Version2.6.14.5
LinuxLinux Kernel Version2.6.15
LinuxLinux Kernel Version2.6.15 Updaterc1
LinuxLinux Kernel Version2.6.15 Updaterc2
LinuxLinux Kernel Version2.6.15 Updaterc3
LinuxLinux Kernel Version2.6.15.1
LinuxLinux Kernel Version2.6.15.2
LinuxLinux Kernel Version2.6.15.3
LinuxLinux Kernel Version2.6.15.4
LinuxLinux Kernel Version2.6.15.5
LinuxLinux Kernel Version2.6.15.11
LinuxLinux Kernel Version2.6.16
LinuxLinux Kernel Version2.6.16 Updaterc1
LinuxLinux Kernel Version2.6.16.1
LinuxLinux Kernel Version2.6.16.7
LinuxLinux Kernel Version2.6.16.9
LinuxLinux Kernel Version2.6.16.11
LinuxLinux Kernel Version2.6.16.12
LinuxLinux Kernel Version2.6.16.13
LinuxLinux Kernel Version2.6.16.19
LinuxLinux Kernel Version2.6.16.23
LinuxLinux Kernel Version2.6.16.27
LinuxLinux Kernel Version2.6.17
LinuxLinux Kernel Version2.6.17 Updaterc5
LinuxLinux Kernel Version2.6.17.1
LinuxLinux Kernel Version2.6.17.2
LinuxLinux Kernel Version2.6.17.3
LinuxLinux Kernel Version2.6.17.5
LinuxLinux Kernel Version2.6.17.6
LinuxLinux Kernel Version2.6.17.7
LinuxLinux Kernel Version2.6.17.8
LinuxLinux Kernel Version2.6.17.10
LinuxLinux Kernel Version2.6.17.11
LinuxLinux Kernel Version2.6.17.12
LinuxLinux Kernel Version2.6.17.13
LinuxLinux Kernel Version2.6.17.14
LinuxLinux Kernel Version2.6.18
LinuxLinux Kernel Version2.6.18.1
LinuxLinux Kernel Version2.6.18.3
LinuxLinux Kernel Version2.6.18.4
LinuxLinux Kernel Version2.6.19
LinuxLinux Kernel Version2.6.19 Updaterc1
LinuxLinux Kernel Version2.6.19 Updaterc2
LinuxLinux Kernel Version2.6.19 Updaterc3
LinuxLinux Kernel Version2.6.19 Updaterc4
LinuxLinux Kernel Version2.6.19.1
LinuxLinux Kernel Version2.6.19.2
LinuxLinux Kernel Version2.6.20
LinuxLinux Kernel Version2.6.20 Updaterc2
LinuxLinux Kernel Version2.6.20.1
LinuxLinux Kernel Version2.6.20.2
LinuxLinux Kernel Version2.6.20.3
LinuxLinux Kernel Version2.6.20.4
LinuxLinux Kernel Version2.6.20.5
LinuxLinux Kernel Version2.6.20.8
LinuxLinux Kernel Version2.6.20.9
LinuxLinux Kernel Version2.6.20.11
LinuxLinux Kernel Version2.6.20.13
LinuxLinux Kernel Version2.6.20.15
LinuxLinux Kernel Version2.6.21
LinuxLinux Kernel Version2.6.21 Updaterc3
LinuxLinux Kernel Version2.6.21 Updaterc4
LinuxLinux Kernel Version2.6.21 Updaterc5
LinuxLinux Kernel Version2.6.21 Updaterc6
LinuxLinux Kernel Version2.6.21.1
LinuxLinux Kernel Version2.6.21.2
LinuxLinux Kernel Version2.6.21.6
LinuxLinux Kernel Version2.6.21.7
LinuxLinux Kernel Version2.6.22
LinuxLinux Kernel Version2.6.22.1
LinuxLinux Kernel Version2.6.22.3
LinuxLinux Kernel Version2.6.22.4
LinuxLinux Kernel Version2.6.22.5
LinuxLinux Kernel Version2.6.22.6
LinuxLinux Kernel Version2.6.22.7
LinuxLinux Kernel Version2.6.22.8
LinuxLinux Kernel Version2.6.22.11
LinuxLinux Kernel Version2.6.22.12
LinuxLinux Kernel Version2.6.22.13
LinuxLinux Kernel Version2.6.22.14
LinuxLinux Kernel Version2.6.22.15
LinuxLinux Kernel Version2.6.22.16
LinuxLinux Kernel Version2.6.22.17
LinuxLinux Kernel Version2.6.22_rc1
LinuxLinux Kernel Version2.6.22_rc7
LinuxLinux Kernel Version2.6.23
LinuxLinux Kernel Version2.6.23 Updaterc1
LinuxLinux Kernel Version2.6.23 Updaterc2
LinuxLinux Kernel Version2.6.23.1
LinuxLinux Kernel Version2.6.23.2
LinuxLinux Kernel Version2.6.23.3
LinuxLinux Kernel Version2.6.23.4
LinuxLinux Kernel Version2.6.23.5
LinuxLinux Kernel Version2.6.23.6
LinuxLinux Kernel Version2.6.23.7
LinuxLinux Kernel Version2.6.23.9
LinuxLinux Kernel Version2.6.23.10
LinuxLinux Kernel Version2.6.23.14
LinuxLinux Kernel Version2.6.24 Updaterc2
LinuxLinux Kernel Version2.6.24 Updaterc3
LinuxLinux Kernel Version2.6.24.1
LinuxLinux Kernel Version2.6.24.2
LinuxLinux Kernel Version2.6.24.6
LinuxLinux Kernel Version2.6.24_rc1
LinuxLinux Kernel Version2.6.25
LinuxLinux Kernel Version2.6.25.1
LinuxLinux Kernel Version2.6.25.2
LinuxLinux Kernel Version2.6.25.3
LinuxLinux Kernel Version2.6.25.4
LinuxLinux Kernel Version2.6_test9_cvs
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.09% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
http://secunia.com/advisories/32759
http://www.mandriva.com/security/advisories?name=MDVSA-2008:174
http://secunia.com/advisories/31107
http://www.ubuntu.com/usn/usn-625-1
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
http://secunia.com/advisories/30982
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
http://secunia.com/advisories/30000
http://secunia.com/advisories/30580
Vendor Advisory
http://secunia.com/advisories/30644
http://secunia.com/advisories/30658
http://secunia.com/advisories/31836
http://secunia.com/advisories/32103
http://secunia.com/advisories/32104
http://secunia.com/advisories/32370
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
http://www.debian.org/security/2008/dsa-1592
http://www.mandriva.com/security/advisories?name=MDVSA-2008:113
http://www.securityfocus.com/archive/1/493300/100/0/threaded
http://www.securityfocus.com/bid/29589
Patch
http://www.securitytracker.com/id?1020210
http://www.vupen.com/english/advisories/2008/1770
https://bugzilla.redhat.com/show_bug.cgi?id=443962
https://exchange.xforce.ibmcloud.com/vulnerabilities/42921
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html