CVE-2008-5025

EPSS 2.95%
Veröffentlicht 17.11.2008 23:30:00
Zuletzt bearbeitet 16.06.2026 22:59:05
CVE-Watchlists
Login
Unerledigt
Login

Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 32

NVD 110 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 2.6.28

Linux ≫ Linux Kernel Version2.2.27

Linux ≫ Linux Kernel Version2.4.36

Linux ≫ Linux Kernel Version2.4.36.1

Linux ≫ Linux Kernel Version2.4.36.2

Linux ≫ Linux Kernel Version2.4.36.3

Linux ≫ Linux Kernel Version2.4.36.4

Linux ≫ Linux Kernel Version2.4.36.5

Linux ≫ Linux Kernel Version2.4.36.6

Linux ≫ Linux Kernel Version2.6

Linux ≫ Linux Kernel Version2.6.18

Linux ≫ Linux Kernel Version2.6.18 Updaterc1

Linux ≫ Linux Kernel Version2.6.18 Updaterc2

Linux ≫ Linux Kernel Version2.6.18 Updaterc3

Linux ≫ Linux Kernel Version2.6.18 Updaterc4

Linux ≫ Linux Kernel Version2.6.18 Updaterc5

Linux ≫ Linux Kernel Version2.6.18 Updaterc6

Linux ≫ Linux Kernel Version2.6.18 Updaterc7

Linux ≫ Linux Kernel Version2.6.19.4

Linux ≫ Linux Kernel Version2.6.19.5

Linux ≫ Linux Kernel Version2.6.19.6

Linux ≫ Linux Kernel Version2.6.19.7

Linux ≫ Linux Kernel Version2.6.20.16

Linux ≫ Linux Kernel Version2.6.20.17

Linux ≫ Linux Kernel Version2.6.20.18

Linux ≫ Linux Kernel Version2.6.20.19

Linux ≫ Linux Kernel Version2.6.20.20

Linux ≫ Linux Kernel Version2.6.20.21

Linux ≫ Linux Kernel Version2.6.21.5

Linux ≫ Linux Kernel Version2.6.21.6

Linux ≫ Linux Kernel Version2.6.21.7

Linux ≫ Linux Kernel Version2.6.22

Linux ≫ Linux Kernel Version2.6.22.1

Linux ≫ Linux Kernel Version2.6.22.2

Linux ≫ Linux Kernel Version2.6.22.8

Linux ≫ Linux Kernel Version2.6.22.9

Linux ≫ Linux Kernel Version2.6.22.10

Linux ≫ Linux Kernel Version2.6.22.11

Linux ≫ Linux Kernel Version2.6.22.12

Linux ≫ Linux Kernel Version2.6.22.13

Linux ≫ Linux Kernel Version2.6.22.14

Linux ≫ Linux Kernel Version2.6.22.15

Linux ≫ Linux Kernel Version2.6.22.17

Linux ≫ Linux Kernel Version2.6.22.18

Linux ≫ Linux Kernel Version2.6.22.19

Linux ≫ Linux Kernel Version2.6.22.20

Linux ≫ Linux Kernel Version2.6.22.21

Linux ≫ Linux Kernel Version2.6.22.22

Linux ≫ Linux Kernel Version2.6.22_rc1

Linux ≫ Linux Kernel Version2.6.22_rc7

Linux ≫ Linux Kernel Version2.6.23

Linux ≫ Linux Kernel Version2.6.23.8

Linux ≫ Linux Kernel Version2.6.23.9

Linux ≫ Linux Kernel Version2.6.23.10

Linux ≫ Linux Kernel Version2.6.23.11

Linux ≫ Linux Kernel Version2.6.23.12

Linux ≫ Linux Kernel Version2.6.23.13

Linux ≫ Linux Kernel Version2.6.23.15

Linux ≫ Linux Kernel Version2.6.23.16

Linux ≫ Linux Kernel Version2.6.23.17

Linux ≫ Linux Kernel Version2.6.23_rc1

Linux ≫ Linux Kernel Version2.6.24

Linux ≫ Linux Kernel Version2.6.24.1

Linux ≫ Linux Kernel Version2.6.24.2

Linux ≫ Linux Kernel Version2.6.24.3

Linux ≫ Linux Kernel Version2.6.24.4

Linux ≫ Linux Kernel Version2.6.24.5

Linux ≫ Linux Kernel Version2.6.24.6

Linux ≫ Linux Kernel Version2.6.24.7

Linux ≫ Linux Kernel Version2.6.24_rc1

Linux ≫ Linux Kernel Version2.6.24_rc4

Linux ≫ Linux Kernel Version2.6.24_rc5

Linux ≫ Linux Kernel Version2.6.25

Linux ≫ Linux Kernel Version2.6.25 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.1

Linux ≫ Linux Kernel Version2.6.25.1 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.2

Linux ≫ Linux Kernel Version2.6.25.2 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.3

Linux ≫ Linux Kernel Version2.6.25.3 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.4

Linux ≫ Linux Kernel Version2.6.25.4 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.5

Linux ≫ Linux Kernel Version2.6.25.5 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.6

Linux ≫ Linux Kernel Version2.6.25.6 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.7

Linux ≫ Linux Kernel Version2.6.25.7 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.8

Linux ≫ Linux Kernel Version2.6.25.8 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.9

Linux ≫ Linux Kernel Version2.6.25.9 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.10

Linux ≫ Linux Kernel Version2.6.25.10 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.11

Linux ≫ Linux Kernel Version2.6.25.11 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.12

Linux ≫ Linux Kernel Version2.6.25.12 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.13

Linux ≫ Linux Kernel Version2.6.25.14

Linux ≫ Linux Kernel Version2.6.25.15

Linux ≫ Linux Kernel Version2.6.25.16

Linux ≫ Linux Kernel Version2.6.25.17

Linux ≫ Linux Kernel Version2.6.26

Linux ≫ Linux Kernel Version2.6.26.1

Linux ≫ Linux Kernel Version2.6.26.2

Linux ≫ Linux Kernel Version2.6.26.3

Linux ≫ Linux Kernel Version2.6.26.4

Linux ≫ Linux Kernel Version2.6.26.5

Linux ≫ Linux Kernel Version2.6.27

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.95%	0.854

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/32918

http://www.ubuntu.com/usn/usn-679-1

http://secunia.com/advisories/33556

http://www.redhat.com/support/errata/RHSA-2009-0014.html

http://secunia.com/advisories/32998

http://secunia.com/advisories/33180

http://www.debian.org/security/2008/dsa-1681

http://www.debian.org/security/2008/dsa-1687

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

http://rhn.redhat.com/errata/RHSA-2009-0264.html

http://secunia.com/advisories/33641

http://secunia.com/advisories/33704

http://secunia.com/advisories/33858

http://www.mandriva.com/security/advisories?name=MDVSA-2008:246

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=d38b7aa7fc3371b52d036748028db50b585ade2e

http://openwall.com/lists/oss-security/2008/11/10/1

http://openwall.com/lists/oss-security/2008/11/10/3

http://openwall.com/lists/oss-security/2008/11/10/6

http://openwall.com/lists/oss-security/2008/11/10/7

http://openwall.com/lists/oss-security/2008/11/11/1

http://openwall.com/lists/oss-security/2008/11/11/12

http://osvdb.org/49863

http://secunia.com/advisories/32719

http://www.securityfocus.com/bid/32289

http://www.securitytracker.com/id?1021230

https://bugzilla.redhat.com/show_bug.cgi?id=470769

https://exchange.xforce.ibmcloud.com/vulnerabilities/46605

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470

https://nvd.nist.gov/vuln/detail/CVE-2008-5025

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5025

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5025

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-5025