10

CVE-2008-1673

The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 4.0
Debian ≫ Debian Linux Version 4.0 Edition alpha
Debian ≫ Debian Linux Version 4.0 Edition amd64
Debian ≫ Debian Linux Version 4.0 Edition arm
Debian ≫ Debian Linux Version 4.0 Edition hppa
Debian ≫ Debian Linux Version 4.0 Edition ia-32
Debian ≫ Debian Linux Version 4.0 Edition ia-64
Debian ≫ Debian Linux Version 4.0 Edition m68k
Debian ≫ Debian Linux Version 4.0 Edition mips
Debian ≫ Debian Linux Version 4.0 Edition mipsel
Debian ≫ Debian Linux Version 4.0 Edition powerpc
Debian ≫ Debian Linux Version 4.0 Edition s-390
Debian ≫ Debian Linux Version 4.0 Edition sparc
Linux ≫ Linux Kernel Version 2.4.0
Linux ≫ Linux Kernel Version 2.4.0 Update test1
Linux ≫ Linux Kernel Version 2.4.0 Update test10
Linux ≫ Linux Kernel Version 2.4.0 Update test11
Linux ≫ Linux Kernel Version 2.4.0 Update test12
Linux ≫ Linux Kernel Version 2.4.0 Update test2
Linux ≫ Linux Kernel Version 2.4.0 Update test3
Linux ≫ Linux Kernel Version 2.4.0 Update test4
Linux ≫ Linux Kernel Version 2.4.0 Update test5
Linux ≫ Linux Kernel Version 2.4.0 Update test6
Linux ≫ Linux Kernel Version 2.4.0 Update test7
Linux ≫ Linux Kernel Version 2.4.0 Update test8
Linux ≫ Linux Kernel Version 2.4.0 Update test9
Linux ≫ Linux Kernel Version 2.4.1
Linux ≫ Linux Kernel Version 2.4.2
Linux ≫ Linux Kernel Version 2.4.3
Linux ≫ Linux Kernel Version 2.4.4
Linux ≫ Linux Kernel Version 2.4.5
Linux ≫ Linux Kernel Version 2.4.6
Linux ≫ Linux Kernel Version 2.4.7
Linux ≫ Linux Kernel Version 2.4.8
Linux ≫ Linux Kernel Version 2.4.9
Linux ≫ Linux Kernel Version 2.4.10
Linux ≫ Linux Kernel Version 2.4.11
Linux ≫ Linux Kernel Version 2.4.12
Linux ≫ Linux Kernel Version 2.4.13
Linux ≫ Linux Kernel Version 2.4.14
Linux ≫ Linux Kernel Version 2.4.15
Linux ≫ Linux Kernel Version 2.4.16
Linux ≫ Linux Kernel Version 2.4.17
Linux ≫ Linux Kernel Version 2.4.18
Linux ≫ Linux Kernel Version 2.4.18 Update pre1
Linux ≫ Linux Kernel Version 2.4.18 Update pre2
Linux ≫ Linux Kernel Version 2.4.18 Update pre3
Linux ≫ Linux Kernel Version 2.4.18 Update pre4
Linux ≫ Linux Kernel Version 2.4.18 Update pre5
Linux ≫ Linux Kernel Version 2.4.18 Update pre6
Linux ≫ Linux Kernel Version 2.4.18 Update pre7
Linux ≫ Linux Kernel Version 2.4.18 Update pre8
Linux ≫ Linux Kernel Version 2.4.19
Linux ≫ Linux Kernel Version 2.4.19 Update pre1
Linux ≫ Linux Kernel Version 2.4.19 Update pre2
Linux ≫ Linux Kernel Version 2.4.19 Update pre3
Linux ≫ Linux Kernel Version 2.4.19 Update pre4
Linux ≫ Linux Kernel Version 2.4.19 Update pre5
Linux ≫ Linux Kernel Version 2.4.19 Update pre6
Linux ≫ Linux Kernel Version 2.4.20
Linux ≫ Linux Kernel Version 2.4.21
Linux ≫ Linux Kernel Version 2.4.21 Update pre1
Linux ≫ Linux Kernel Version 2.4.21 Update pre4
Linux ≫ Linux Kernel Version 2.4.21 Update pre7
Linux ≫ Linux Kernel Version 2.4.22
Linux ≫ Linux Kernel Version 2.4.23
Linux ≫ Linux Kernel Version 2.4.23 Update pre9
Linux ≫ Linux Kernel Version 2.4.23_ow2
Linux ≫ Linux Kernel Version 2.4.24
Linux ≫ Linux Kernel Version 2.4.24_ow1
Linux ≫ Linux Kernel Version 2.4.25
Linux ≫ Linux Kernel Version 2.4.26
Linux ≫ Linux Kernel Version 2.4.27
Linux ≫ Linux Kernel Version 2.4.27 Update pre1
Linux ≫ Linux Kernel Version 2.4.27 Update pre2
Linux ≫ Linux Kernel Version 2.4.27 Update pre3
Linux ≫ Linux Kernel Version 2.4.27 Update pre4
Linux ≫ Linux Kernel Version 2.4.27 Update pre5
Linux ≫ Linux Kernel Version 2.4.28
Linux ≫ Linux Kernel Version 2.4.29
Linux ≫ Linux Kernel Version 2.4.29 Update rc1
Linux ≫ Linux Kernel Version 2.4.29 Update rc2
Linux ≫ Linux Kernel Version 2.4.30
Linux ≫ Linux Kernel Version 2.4.30 Update rc2
Linux ≫ Linux Kernel Version 2.4.30 Update rc3
Linux ≫ Linux Kernel Version 2.4.31
Linux ≫ Linux Kernel Version 2.4.31 Update pre1
Linux ≫ Linux Kernel Version 2.4.32
Linux ≫ Linux Kernel Version 2.4.32 Update pre1
Linux ≫ Linux Kernel Version 2.4.32 Update pre2
Linux ≫ Linux Kernel Version 2.4.33
Linux ≫ Linux Kernel Version 2.4.33 Update pre1
Linux ≫ Linux Kernel Version 2.4.33.2
Linux ≫ Linux Kernel Version 2.4.33.3
Linux ≫ Linux Kernel Version 2.4.33.4
Linux ≫ Linux Kernel Version 2.4.33.5
Linux ≫ Linux Kernel Version 2.4.34
Linux ≫ Linux Kernel Version 2.4.35
Linux ≫ Linux Kernel Version 2.4.36
Linux ≫ Linux Kernel Version 2.4.36.1
Linux ≫ Linux Kernel Version 2.4.36.2
Linux ≫ Linux Kernel Version 2.4.36.3
Linux ≫ Linux Kernel Version 2.4.36.4
Linux ≫ Linux Kernel Version 2.4.36.5
Linux ≫ Linux Kernel Version 2.6.0
Linux ≫ Linux Kernel Version 2.6.0 Update test1
Linux ≫ Linux Kernel Version 2.6.0 Update test2
Linux ≫ Linux Kernel Version 2.6.0 Update test3
Linux ≫ Linux Kernel Version 2.6.0 Update test4
Linux ≫ Linux Kernel Version 2.6.0 Update test5
Linux ≫ Linux Kernel Version 2.6.0 Update test6
Linux ≫ Linux Kernel Version 2.6.0 Update test7
Linux ≫ Linux Kernel Version 2.6.0 Update test8
Linux ≫ Linux Kernel Version 2.6.0 Update test9
Linux ≫ Linux Kernel Version 2.6.1
Linux ≫ Linux Kernel Version 2.6.1 Update rc1
Linux ≫ Linux Kernel Version 2.6.1 Update rc2
Linux ≫ Linux Kernel Version 2.6.2
Linux ≫ Linux Kernel Version 2.6.10
Linux ≫ Linux Kernel Version 2.6.10 Update rc2
Linux ≫ Linux Kernel Version 2.6.11
Linux ≫ Linux Kernel Version 2.6.11 Update rc2
Linux ≫ Linux Kernel Version 2.6.11 Update rc3
Linux ≫ Linux Kernel Version 2.6.11 Update rc4
Linux ≫ Linux Kernel Version 2.6.11.4
Linux ≫ Linux Kernel Version 2.6.11.5
Linux ≫ Linux Kernel Version 2.6.11.6
Linux ≫ Linux Kernel Version 2.6.11.7
Linux ≫ Linux Kernel Version 2.6.11.8
Linux ≫ Linux Kernel Version 2.6.11.11
Linux ≫ Linux Kernel Version 2.6.11.12
Linux ≫ Linux Kernel Version 2.6.12
Linux ≫ Linux Kernel Version 2.6.12 Update rc1
Linux ≫ Linux Kernel Version 2.6.12 Update rc4
Linux ≫ Linux Kernel Version 2.6.12 Update rc5
Linux ≫ Linux Kernel Version 2.6.12.1
Linux ≫ Linux Kernel Version 2.6.12.2
Linux ≫ Linux Kernel Version 2.6.12.3
Linux ≫ Linux Kernel Version 2.6.12.4
Linux ≫ Linux Kernel Version 2.6.12.5
Linux ≫ Linux Kernel Version 2.6.12.6
Linux ≫ Linux Kernel Version 2.6.12.12
Linux ≫ Linux Kernel Version 2.6.12.22
Linux ≫ Linux Kernel Version 2.6.13
Linux ≫ Linux Kernel Version 2.6.13 Update rc1
Linux ≫ Linux Kernel Version 2.6.13 Update rc4
Linux ≫ Linux Kernel Version 2.6.13 Update rc6
Linux ≫ Linux Kernel Version 2.6.13 Update rc7
Linux ≫ Linux Kernel Version 2.6.13.1
Linux ≫ Linux Kernel Version 2.6.13.2
Linux ≫ Linux Kernel Version 2.6.13.3
Linux ≫ Linux Kernel Version 2.6.13.4
Linux ≫ Linux Kernel Version 2.6.14
Linux ≫ Linux Kernel Version 2.6.14 Update rc1
Linux ≫ Linux Kernel Version 2.6.14 Update rc2
Linux ≫ Linux Kernel Version 2.6.14 Update rc3
Linux ≫ Linux Kernel Version 2.6.14 Update rc4
Linux ≫ Linux Kernel Version 2.6.14.1
Linux ≫ Linux Kernel Version 2.6.14.2
Linux ≫ Linux Kernel Version 2.6.14.3
Linux ≫ Linux Kernel Version 2.6.14.4
Linux ≫ Linux Kernel Version 2.6.14.5
Linux ≫ Linux Kernel Version 2.6.15
Linux ≫ Linux Kernel Version 2.6.15 Update rc1
Linux ≫ Linux Kernel Version 2.6.15 Update rc2
Linux ≫ Linux Kernel Version 2.6.15 Update rc3
Linux ≫ Linux Kernel Version 2.6.15.1
Linux ≫ Linux Kernel Version 2.6.15.2
Linux ≫ Linux Kernel Version 2.6.15.3
Linux ≫ Linux Kernel Version 2.6.15.4
Linux ≫ Linux Kernel Version 2.6.15.5
Linux ≫ Linux Kernel Version 2.6.15.11
Linux ≫ Linux Kernel Version 2.6.16
Linux ≫ Linux Kernel Version 2.6.16 Update rc1
Linux ≫ Linux Kernel Version 2.6.16.1
Linux ≫ Linux Kernel Version 2.6.16.7
Linux ≫ Linux Kernel Version 2.6.16.9
Linux ≫ Linux Kernel Version 2.6.16.11
Linux ≫ Linux Kernel Version 2.6.16.12
Linux ≫ Linux Kernel Version 2.6.16.13
Linux ≫ Linux Kernel Version 2.6.16.19
Linux ≫ Linux Kernel Version 2.6.16.23
Linux ≫ Linux Kernel Version 2.6.16.27
Linux ≫ Linux Kernel Version 2.6.17
Linux ≫ Linux Kernel Version 2.6.17 Update rc5
Linux ≫ Linux Kernel Version 2.6.17.1
Linux ≫ Linux Kernel Version 2.6.17.2
Linux ≫ Linux Kernel Version 2.6.17.3
Linux ≫ Linux Kernel Version 2.6.17.5
Linux ≫ Linux Kernel Version 2.6.17.6
Linux ≫ Linux Kernel Version 2.6.17.7
Linux ≫ Linux Kernel Version 2.6.17.8
Linux ≫ Linux Kernel Version 2.6.17.10
Linux ≫ Linux Kernel Version 2.6.17.11
Linux ≫ Linux Kernel Version 2.6.17.12
Linux ≫ Linux Kernel Version 2.6.17.13
Linux ≫ Linux Kernel Version 2.6.17.14
Linux ≫ Linux Kernel Version 2.6.18
Linux ≫ Linux Kernel Version 2.6.18.1
Linux ≫ Linux Kernel Version 2.6.18.3
Linux ≫ Linux Kernel Version 2.6.18.4
Linux ≫ Linux Kernel Version 2.6.19
Linux ≫ Linux Kernel Version 2.6.19 Update rc1
Linux ≫ Linux Kernel Version 2.6.19 Update rc2
Linux ≫ Linux Kernel Version 2.6.19 Update rc3
Linux ≫ Linux Kernel Version 2.6.19 Update rc4
Linux ≫ Linux Kernel Version 2.6.19.1
Linux ≫ Linux Kernel Version 2.6.19.2
Linux ≫ Linux Kernel Version 2.6.20
Linux ≫ Linux Kernel Version 2.6.20 Update rc2
Linux ≫ Linux Kernel Version 2.6.20.1
Linux ≫ Linux Kernel Version 2.6.20.2
Linux ≫ Linux Kernel Version 2.6.20.3
Linux ≫ Linux Kernel Version 2.6.20.4
Linux ≫ Linux Kernel Version 2.6.20.5
Linux ≫ Linux Kernel Version 2.6.20.8
Linux ≫ Linux Kernel Version 2.6.20.9
Linux ≫ Linux Kernel Version 2.6.20.11
Linux ≫ Linux Kernel Version 2.6.20.13
Linux ≫ Linux Kernel Version 2.6.20.15
Linux ≫ Linux Kernel Version 2.6.21
Linux ≫ Linux Kernel Version 2.6.21 Update rc3
Linux ≫ Linux Kernel Version 2.6.21 Update rc4
Linux ≫ Linux Kernel Version 2.6.21 Update rc5
Linux ≫ Linux Kernel Version 2.6.21 Update rc6
Linux ≫ Linux Kernel Version 2.6.21.1
Linux ≫ Linux Kernel Version 2.6.21.2
Linux ≫ Linux Kernel Version 2.6.21.6
Linux ≫ Linux Kernel Version 2.6.21.7
Linux ≫ Linux Kernel Version 2.6.22
Linux ≫ Linux Kernel Version 2.6.22.1
Linux ≫ Linux Kernel Version 2.6.22.3
Linux ≫ Linux Kernel Version 2.6.22.4
Linux ≫ Linux Kernel Version 2.6.22.5
Linux ≫ Linux Kernel Version 2.6.22.6
Linux ≫ Linux Kernel Version 2.6.22.7
Linux ≫ Linux Kernel Version 2.6.22.8
Linux ≫ Linux Kernel Version 2.6.22.11
Linux ≫ Linux Kernel Version 2.6.22.12
Linux ≫ Linux Kernel Version 2.6.22.13
Linux ≫ Linux Kernel Version 2.6.22.14
Linux ≫ Linux Kernel Version 2.6.22.15
Linux ≫ Linux Kernel Version 2.6.22.16
Linux ≫ Linux Kernel Version 2.6.22.17
Linux ≫ Linux Kernel Version 2.6.22_rc1
Linux ≫ Linux Kernel Version 2.6.22_rc7
Linux ≫ Linux Kernel Version 2.6.23
Linux ≫ Linux Kernel Version 2.6.23 Update rc1
Linux ≫ Linux Kernel Version 2.6.23 Update rc2
Linux ≫ Linux Kernel Version 2.6.23.1
Linux ≫ Linux Kernel Version 2.6.23.2
Linux ≫ Linux Kernel Version 2.6.23.3
Linux ≫ Linux Kernel Version 2.6.23.4
Linux ≫ Linux Kernel Version 2.6.23.5
Linux ≫ Linux Kernel Version 2.6.23.6
Linux ≫ Linux Kernel Version 2.6.23.7
Linux ≫ Linux Kernel Version 2.6.23.9
Linux ≫ Linux Kernel Version 2.6.23.10
Linux ≫ Linux Kernel Version 2.6.23.14
Linux ≫ Linux Kernel Version 2.6.24 Update rc2
Linux ≫ Linux Kernel Version 2.6.24 Update rc3
Linux ≫ Linux Kernel Version 2.6.24.1
Linux ≫ Linux Kernel Version 2.6.24.2
Linux ≫ Linux Kernel Version 2.6.24.6
Linux ≫ Linux Kernel Version 2.6.24_rc1
Linux ≫ Linux Kernel Version 2.6.25
Linux ≫ Linux Kernel Version 2.6.25.1
Linux ≫ Linux Kernel Version 2.6.25.2
Linux ≫ Linux Kernel Version 2.6.25.3
Linux ≫ Linux Kernel Version 2.6.25.4
Linux ≫ Linux Kernel Version 2.6_test9_cvs
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.09% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
http://secunia.com/advisories/32759
http://www.mandriva.com/security/advisories?name=MDVSA-2008:174
http://secunia.com/advisories/31107
http://www.ubuntu.com/usn/usn-625-1
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
http://secunia.com/advisories/30982
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
http://secunia.com/advisories/30000
http://secunia.com/advisories/30580
Vendor Advisory
http://secunia.com/advisories/30644
http://secunia.com/advisories/30658
http://secunia.com/advisories/31836
http://secunia.com/advisories/32103
http://secunia.com/advisories/32104
http://secunia.com/advisories/32370
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
http://www.debian.org/security/2008/dsa-1592
http://www.mandriva.com/security/advisories?name=MDVSA-2008:113
http://www.securityfocus.com/archive/1/493300/100/0/threaded
http://www.securityfocus.com/bid/29589
Patch
http://www.securitytracker.com/id?1020210
http://www.vupen.com/english/advisories/2008/1770
https://bugzilla.redhat.com/show_bug.cgi?id=443962
https://exchange.xforce.ibmcloud.com/vulnerabilities/42921
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html