CVE-2008-4933

EPSS 2.9%
Veröffentlicht 05.11.2008 15:00:14
Zuletzt bearbeitet 16.06.2026 22:58:47
Erkennungen
Login

Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 25

NVD 110 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 2.6.28

Linux ≫ Linux Kernel Version 2.2.27

Linux ≫ Linux Kernel Version 2.4.36

Linux ≫ Linux Kernel Version 2.4.36.1

Linux ≫ Linux Kernel Version 2.4.36.2

Linux ≫ Linux Kernel Version 2.4.36.3

Linux ≫ Linux Kernel Version 2.4.36.4

Linux ≫ Linux Kernel Version 2.4.36.5

Linux ≫ Linux Kernel Version 2.4.36.6

Linux ≫ Linux Kernel Version 2.6

Linux ≫ Linux Kernel Version 2.6.18

Linux ≫ Linux Kernel Version 2.6.18 Update rc1

Linux ≫ Linux Kernel Version 2.6.18 Update rc2

Linux ≫ Linux Kernel Version 2.6.18 Update rc3

Linux ≫ Linux Kernel Version 2.6.18 Update rc4

Linux ≫ Linux Kernel Version 2.6.18 Update rc5

Linux ≫ Linux Kernel Version 2.6.18 Update rc6

Linux ≫ Linux Kernel Version 2.6.18 Update rc7

Linux ≫ Linux Kernel Version 2.6.19.4

Linux ≫ Linux Kernel Version 2.6.19.5

Linux ≫ Linux Kernel Version 2.6.19.6

Linux ≫ Linux Kernel Version 2.6.19.7

Linux ≫ Linux Kernel Version 2.6.20.16

Linux ≫ Linux Kernel Version 2.6.20.17

Linux ≫ Linux Kernel Version 2.6.20.18

Linux ≫ Linux Kernel Version 2.6.20.19

Linux ≫ Linux Kernel Version 2.6.20.20

Linux ≫ Linux Kernel Version 2.6.20.21

Linux ≫ Linux Kernel Version 2.6.21.5

Linux ≫ Linux Kernel Version 2.6.21.6

Linux ≫ Linux Kernel Version 2.6.21.7

Linux ≫ Linux Kernel Version 2.6.22

Linux ≫ Linux Kernel Version 2.6.22.1

Linux ≫ Linux Kernel Version 2.6.22.2

Linux ≫ Linux Kernel Version 2.6.22.8

Linux ≫ Linux Kernel Version 2.6.22.9

Linux ≫ Linux Kernel Version 2.6.22.10

Linux ≫ Linux Kernel Version 2.6.22.11

Linux ≫ Linux Kernel Version 2.6.22.12

Linux ≫ Linux Kernel Version 2.6.22.13

Linux ≫ Linux Kernel Version 2.6.22.14

Linux ≫ Linux Kernel Version 2.6.22.15

Linux ≫ Linux Kernel Version 2.6.22.17

Linux ≫ Linux Kernel Version 2.6.22.18

Linux ≫ Linux Kernel Version 2.6.22.19

Linux ≫ Linux Kernel Version 2.6.22.20

Linux ≫ Linux Kernel Version 2.6.22.21

Linux ≫ Linux Kernel Version 2.6.22.22

Linux ≫ Linux Kernel Version 2.6.22_rc1

Linux ≫ Linux Kernel Version 2.6.22_rc7

Linux ≫ Linux Kernel Version 2.6.23

Linux ≫ Linux Kernel Version 2.6.23.8

Linux ≫ Linux Kernel Version 2.6.23.9

Linux ≫ Linux Kernel Version 2.6.23.10

Linux ≫ Linux Kernel Version 2.6.23.11

Linux ≫ Linux Kernel Version 2.6.23.12

Linux ≫ Linux Kernel Version 2.6.23.13

Linux ≫ Linux Kernel Version 2.6.23.15

Linux ≫ Linux Kernel Version 2.6.23.16

Linux ≫ Linux Kernel Version 2.6.23.17

Linux ≫ Linux Kernel Version 2.6.23_rc1

Linux ≫ Linux Kernel Version 2.6.24

Linux ≫ Linux Kernel Version 2.6.24.1

Linux ≫ Linux Kernel Version 2.6.24.2

Linux ≫ Linux Kernel Version 2.6.24.3

Linux ≫ Linux Kernel Version 2.6.24.4

Linux ≫ Linux Kernel Version 2.6.24.5

Linux ≫ Linux Kernel Version 2.6.24.6

Linux ≫ Linux Kernel Version 2.6.24.7

Linux ≫ Linux Kernel Version 2.6.24_rc1

Linux ≫ Linux Kernel Version 2.6.24_rc4

Linux ≫ Linux Kernel Version 2.6.24_rc5

Linux ≫ Linux Kernel Version 2.6.25

Linux ≫ Linux Kernel Version 2.6.25 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.1

Linux ≫ Linux Kernel Version 2.6.25.1 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.2

Linux ≫ Linux Kernel Version 2.6.25.2 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.3

Linux ≫ Linux Kernel Version 2.6.25.3 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.4

Linux ≫ Linux Kernel Version 2.6.25.4 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.5

Linux ≫ Linux Kernel Version 2.6.25.5 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.6

Linux ≫ Linux Kernel Version 2.6.25.6 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.7

Linux ≫ Linux Kernel Version 2.6.25.7 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.8

Linux ≫ Linux Kernel Version 2.6.25.8 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.9

Linux ≫ Linux Kernel Version 2.6.25.9 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.10

Linux ≫ Linux Kernel Version 2.6.25.10 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.11

Linux ≫ Linux Kernel Version 2.6.25.11 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.12

Linux ≫ Linux Kernel Version 2.6.25.12 Edition x86_64

Linux ≫ Linux Kernel Version 2.6.25.13

Linux ≫ Linux Kernel Version 2.6.25.14

Linux ≫ Linux Kernel Version 2.6.25.15

Linux ≫ Linux Kernel Version 2.6.25.16

Linux ≫ Linux Kernel Version 2.6.25.17

Linux ≫ Linux Kernel Version 2.6.26

Linux ≫ Linux Kernel Version 2.6.26.1

Linux ≫ Linux Kernel Version 2.6.26.2

Linux ≫ Linux Kernel Version 2.6.26.3

Linux ≫ Linux Kernel Version 2.6.26.4

Linux ≫ Linux Kernel Version 2.6.26.5

Linux ≫ Linux Kernel Version 2.6.27

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.9%	0.851

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/32918

http://www.ubuntu.com/usn/usn-679-1

http://secunia.com/advisories/33556

http://www.redhat.com/support/errata/RHSA-2009-0014.html

http://secunia.com/advisories/32998

http://secunia.com/advisories/33180

http://www.debian.org/security/2008/dsa-1681

http://www.debian.org/security/2008/dsa-1687

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=efc7ffcb4237f8cb9938909041c4ed38f6e1bf40

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

http://rhn.redhat.com/errata/RHSA-2009-0264.html

http://secunia.com/advisories/32510

Vendor Advisory

http://secunia.com/advisories/33641

http://secunia.com/advisories/33704

http://secunia.com/advisories/33858

http://www.mandriva.com/security/advisories?name=MDVSA-2008:234

http://www.openwall.com/lists/oss-security/2008/11/03/2

http://www.securityfocus.com/bid/32093

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/46405

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11061

https://nvd.nist.gov/vuln/detail/CVE-2008-4933

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-4933

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-4933

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-4933