CVE-2008-3247

EPSS 0.36%
Veröffentlicht 24.07.2008 15:41:00
Zuletzt bearbeitet 16.06.2026 22:55:27
CVE-Watchlists
Login
Unerledigt
Login

The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 13 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version2.6.25 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.1 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.2 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.3 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.4 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.5 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.6 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.7 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.8 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.9 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.10 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.11 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.12 Editionx86_64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.278

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html

Patch

http://secunia.com/advisories/31202

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=74454a6a286bfce4bb23d89bd465f856fa6a6e19

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26

http://secunia.com/advisories/31172

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.11

http://www.securityfocus.com/bid/30351

http://www.securitytracker.com/id?1020544

https://exchange.xforce.ibmcloud.com/vulnerabilities/43979

https://nvd.nist.gov/vuln/detail/CVE-2008-3247

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3247

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3247

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-3247